Skip to content
OpenAdvisories
Unscored RHSA-2008:0855 2 CVEs

Red Hat Security Advisory: openssh security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 46

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as openssh 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::as openssh-askpass 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::as openssh-askpass-gnome 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::as openssh-clients 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::as openssh-debuginfo 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::as openssh-server 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::desktop openssh 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::desktop openssh-askpass 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::desktop openssh-askpass-gnome 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::desktop openssh-clients 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::desktop openssh-debuginfo 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::desktop openssh-server 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::es openssh 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::es openssh-askpass 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::es openssh-askpass-gnome 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::es openssh-clients 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::es openssh-debuginfo 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::es openssh-server 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::ws openssh 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::ws openssh-askpass 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::ws openssh-askpass-gnome 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::ws openssh-clients 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::ws openssh-debuginfo 0:3.9p1-11.el4_7
Red Hat · RHEL 4 enterprise_linux:4::ws openssh-server 0:3.9p1-11.el4_7
Red Hat · RHEL 5 enterprise_linux:5::client openssh 0:4.3p2-26.el5_2.1
Red Hat · RHEL 5 enterprise_linux:5::client openssh-askpass 0:4.3p2-26.el5_2.1
Red Hat · RHEL 5 enterprise_linux:5::client openssh-clients 0:4.3p2-26.el5_2.1
Red Hat · RHEL 5 enterprise_linux:5::client openssh-debuginfo 0:4.3p2-26.el5_2.1
Red Hat · RHEL 5 enterprise_linux:5::client openssh-server 0:4.3p2-26.el5_2.1
Red Hat · RHEL 5 enterprise_linux:5::server openssh 0:4.3p2-26.el5_2.1
Red Hat · RHEL 5 enterprise_linux:5::server openssh-askpass 0:4.3p2-26.el5_2.1
Red Hat · RHEL 5 enterprise_linux:5::server openssh-clients 0:4.3p2-26.el5_2.1
Red Hat · RHEL 5 enterprise_linux:5::server openssh-debuginfo 0:4.3p2-26.el5_2.1
Red Hat · RHEL 5 enterprise_linux:5::server openssh-server 0:4.3p2-26.el5_2.1
Red Hat · RHEL 4.5 EUS rhel_eus:4.5::as openssh 0:3.9p1-10.RHEL4.20
Red Hat · RHEL 4.5 EUS rhel_eus:4.5::as openssh-askpass 0:3.9p1-10.RHEL4.20
Red Hat · RHEL 4.5 EUS rhel_eus:4.5::as openssh-askpass-gnome 0:3.9p1-10.RHEL4.20
Red Hat · RHEL 4.5 EUS rhel_eus:4.5::as openssh-clients 0:3.9p1-10.RHEL4.20
Red Hat · RHEL 4.5 EUS rhel_eus:4.5::as openssh-debuginfo 0:3.9p1-10.RHEL4.20
Red Hat · RHEL 4.5 EUS rhel_eus:4.5::as openssh-server 0:3.9p1-10.RHEL4.20
Red Hat · RHEL 4.5 EUS rhel_eus:4.5::es openssh 0:3.9p1-10.RHEL4.20
Red Hat · RHEL 4.5 EUS rhel_eus:4.5::es openssh-askpass 0:3.9p1-10.RHEL4.20
Red Hat · RHEL 4.5 EUS rhel_eus:4.5::es openssh-askpass-gnome 0:3.9p1-10.RHEL4.20
Red Hat · RHEL 4.5 EUS rhel_eus:4.5::es openssh-clients 0:3.9p1-10.RHEL4.20
Red Hat · RHEL 4.5 EUS rhel_eus:4.5::es openssh-debuginfo 0:3.9p1-10.RHEL4.20
Red Hat · RHEL 4.5 EUS rhel_eus:4.5::es openssh-server 0:3.9p1-10.RHEL4.20

Vulnerabilities 2

  • Unscored —
    CVE-2007-4752

    ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 co…

    openssh Debian
  • Unscored —
    CVE-2008-3844

    Certain Red Hat Enterprise Linux (RHEL) 4 and 5 packages for OpenSSH, as signed in August 2008 using a legitimate Red H…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.redhat.com/security/data/openssh-blacklist.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=280361
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0855.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-4752
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-4752
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-4752
  • report
    https://access.redhat.com/security/cve/CVE-2008-3844
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618333
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3844
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3844