Linux · Security advisory · November 14, 2019
ELSA-2019-3702: Security update for 8 packages
ELSA-2019-3702, released November 14, 2019, fixes 3 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: Routine.
Routine
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.5820
99th percentile
Priority of the 3 CVEs
Patch now 0
Urgent 0
High 0
Routine 3
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| openssh | ol 8 | 0:8.0p1-3.el8 |
| openssh-askpass | ol 8 | 0:8.0p1-3.el8 |
| openssh-cavs | ol 8 | 0:8.0p1-3.el8 |
| openssh-clients | ol 8 | 0:8.0p1-3.el8 |
| openssh-keycat | ol 8 | 0:8.0p1-3.el8 |
| openssh-ldap | ol 8 | 0:8.0p1-3.el8 |
| openssh-server | ol 8 | 0:8.0p1-3.el8 |
| pam_ssh_agent_auth | ol 8 | 0:0.10.3-7.3.el8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Routine | CVE-2019-6111 | openssh: OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems | 5.9 | 0.5820 | None reported | |
| Routine | CVE-2019-6109 | openssh-client: An issue was discovered in OpenSSH 7.9 | 6.8 | 0.0381 | None reported | |
| Routine | CVE-2018-20685 | openssh-client: In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypassintended access restrictions via the filen... | 5.3 | 0.0368 | None reported |
Showing 1 to 3 of 3
1