Skip to content
OpenAdvisories
High RHSA-2016:0043 2 CVEs

Red Hat Security Advisory: openssh security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 36

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client openssh 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client openssh-askpass 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client openssh-clients 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client openssh-debuginfo 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client openssh-keycat 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client openssh-ldap 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client openssh-server 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client openssh-server-sysvinit 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client pam_ssh_agent_auth 0:0.9.3-9.23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-askpass 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-clients 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-debuginfo 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-keycat 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-ldap 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-server 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-server-sysvinit 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode pam_ssh_agent_auth 0:0.9.3-9.23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server openssh 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server openssh-askpass 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server openssh-clients 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server openssh-debuginfo 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server openssh-keycat 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server openssh-ldap 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server openssh-server 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server openssh-server-sysvinit 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server pam_ssh_agent_auth 0:0.9.3-9.23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-askpass 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-clients 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-debuginfo 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-keycat 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-ldap 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-server 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-server-sysvinit 0:6.6.1p1-23.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation pam_ssh_agent_auth 0:0.9.3-9.23.el7_2

Vulnerabilities 2

  • High 8.1
    CVE-2016-0778 EPSS 21%

    The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x bef…

    openssh openssh Debian Ubuntu
  • Medium 6.5
    CVE-2016-0777 Public exploit EPSS 63%

    The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote ser…

    openssh openssh Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/articles/2123781
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1298032
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1298033
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0043.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-0777
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-0777
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-0777
  • article
    http://www.openssh.com/txt/release-7.1p2
  • article
    https://www.qualys.com/2016/01/14/cve-2016-0777-cve-2016-0778/openssh-cve-2016-0777-cve-2016-0778.txt
  • report
    https://access.redhat.com/security/cve/CVE-2016-0778
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-0778
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-0778