Skip to content
OpenAdvisories
High RHSA-2016:0466 2 CVEs

Red Hat Security Advisory: openssh security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 28

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client openssh 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client openssh-askpass 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client openssh-clients 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client openssh-debuginfo 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client openssh-ldap 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client openssh-server 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client pam_ssh_agent_auth 0:0.9.3-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode openssh 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode openssh-askpass 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode openssh-clients 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode openssh-debuginfo 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode openssh-ldap 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode openssh-server 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode pam_ssh_agent_auth 0:0.9.3-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server openssh 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server openssh-askpass 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server openssh-clients 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server openssh-debuginfo 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server openssh-ldap 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server openssh-server 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server pam_ssh_agent_auth 0:0.9.3-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation openssh 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation openssh-askpass 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation openssh-clients 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation openssh-debuginfo 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation openssh-ldap 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation openssh-server 0:5.3p1-114.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation pam_ssh_agent_auth 0:0.9.3-114.el6_7

Vulnerabilities 2

  • High 8.1
    CVE-2015-5600 Public exploit

    The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processi…

    openssh openssh Debian Ubuntu
  • Medium 6.4
    CVE-2016-3115 Public exploit EPSS 36%

    Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users t…

    openssh openssh Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1245969
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1316829
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0466.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-5600
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5600
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5600
  • article
    https://kingcope.wordpress.com/2015/07/16/openssh-keyboard-interactive-authentication-brute-force-vulnerability-maxauthtries-bypass/
  • report
    https://access.redhat.com/security/cve/CVE-2016-3115
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-3115
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-3115
  • article
    http://www.openssh.com/txt/x11fwd.adv