Skip to content
OpenAdvisories
Medium RHSA-2015:0425 2 CVEs

Red Hat Security Advisory: openssh security, bug fix and enhancement update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 36

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client openssh 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::client openssh-askpass 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::client openssh-clients 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::client openssh-debuginfo 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::client openssh-keycat 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::client openssh-ldap 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::client openssh-server 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::client openssh-server-sysvinit 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::client pam_ssh_agent_auth 0:0.9.3-9.11.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-askpass 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-clients 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-debuginfo 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-keycat 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-ldap 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-server 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-server-sysvinit 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode pam_ssh_agent_auth 0:0.9.3-9.11.el7
Red Hat · RHEL 7 enterprise_linux:7::server openssh 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::server openssh-askpass 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::server openssh-clients 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::server openssh-debuginfo 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::server openssh-keycat 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::server openssh-ldap 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::server openssh-server 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::server openssh-server-sysvinit 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::server pam_ssh_agent_auth 0:0.9.3-9.11.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-askpass 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-clients 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-debuginfo 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-keycat 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-ldap 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-server 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-server-sysvinit 0:6.6.1p1-11.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation pam_ssh_agent_auth 0:0.9.3-9.11.el7

Vulnerabilities 2

  • Medium 6.5
    CVE-2014-2653

    The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger …

    openssh Debian
  • Unscored —
    CVE-2014-9278

    The OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a Kerberos environment, allows…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=912792
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1071967
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1081338
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1084079
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1097665
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1102288
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1134997
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1143867
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1153011
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1155626
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1161173
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1162620
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1169843
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0425.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-2653
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-2653
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-2653
  • report
    https://access.redhat.com/security/cve/CVE-2014-9278
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-9278
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-9278