Skip to content
OpenAdvisories
Medium RHSA-2014:1552 2 CVEs

Red Hat Security Advisory: openssh security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 28

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client openssh 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::client openssh-askpass 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::client openssh-clients 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::client openssh-debuginfo 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::client openssh-ldap 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::client openssh-server 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::client pam_ssh_agent_auth 0:0.9.3-104.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode openssh 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode openssh-askpass 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode openssh-clients 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode openssh-debuginfo 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode openssh-ldap 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode openssh-server 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode pam_ssh_agent_auth 0:0.9.3-104.el6
Red Hat · RHEL 6 enterprise_linux:6::server openssh 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::server openssh-askpass 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::server openssh-clients 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::server openssh-debuginfo 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::server openssh-ldap 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::server openssh-server 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::server pam_ssh_agent_auth 0:0.9.3-104.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation openssh 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation openssh-askpass 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation openssh-clients 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation openssh-debuginfo 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation openssh-ldap 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation openssh-server 0:5.3p1-104.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation pam_ssh_agent_auth 0:0.9.3-104.el6

Vulnerabilities 2

  • Medium 6.5
    CVE-2014-2653

    The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger …

    openssh Debian
  • Medium 4.2
    CVE-2014-2532

    sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote a…

    openssh Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/solutions/711953
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=953088
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1010429
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1023043
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1023044
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1027197
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1028643
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1077843
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1081338
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1108836
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1111568
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1552.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-2532
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-2532
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-2532
  • report
    https://access.redhat.com/security/cve/CVE-2014-2653
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-2653
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-2653