Бюллетень безопасности RHSA-2021:4368

Средняя (4.3)

(AV:N/AC:M/Au:N/C:P/I:N/A:N)

RedHat

openssh (any, Unknown) openssh-askpass (any) openssh-cavs (any) openssh-clients (any) openssh-keycat (any) openssh-ldap (any) openssh-server (any) pam_ssh_agent_auth (any)

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* openssh: Observable discrepancy leading to an information leak in the algorithm negotiation (CVE-2020-14145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes linked from the References section.

Используйте рекомендации производителя, доступные по ссылке https://access.redhat.com/knowledge/articles/11258

Источник: CVE
Наименование: CVE-2020-14145
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14145

https://access.redhat.com/errata/RHSA-2021:4368