Skip to content
OpenAdvisories
Critical RHSA-2016:0465 2 CVEs

Red Hat Security Advisory: openssh security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 36

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client openssh 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client openssh-askpass 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client openssh-clients 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client openssh-debuginfo 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client openssh-keycat 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client openssh-ldap 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client openssh-server 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client openssh-server-sysvinit 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client pam_ssh_agent_auth 0:0.9.3-9.25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-askpass 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-clients 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-debuginfo 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-keycat 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-ldap 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-server 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode openssh-server-sysvinit 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode pam_ssh_agent_auth 0:0.9.3-9.25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server openssh 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server openssh-askpass 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server openssh-clients 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server openssh-debuginfo 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server openssh-keycat 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server openssh-ldap 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server openssh-server 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server openssh-server-sysvinit 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server pam_ssh_agent_auth 0:0.9.3-9.25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-askpass 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-clients 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-debuginfo 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-keycat 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-ldap 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-server 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation openssh-server-sysvinit 0:6.6.1p1-25.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation pam_ssh_agent_auth 0:0.9.3-9.25.el7_2

Vulnerabilities 2

  • Critical 9.8
    CVE-2016-1908 EPSS 14%

    The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the loc…

    openssh openssh Debian Ubuntu
  • Medium 6.4
    CVE-2016-3115 Public exploit EPSS 36%

    Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users t…

    openssh openssh Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1298741
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1316829
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0465.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-1908
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-1908
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-1908
  • report
    https://access.redhat.com/security/cve/CVE-2016-3115
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-3115
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-3115
  • article
    http://www.openssh.com/txt/x11fwd.adv