Linux · Security advisory · November 16, 2021

ELSA-2021-4368: Security update for 8 packages

ELSA-2021-4368, released November 16, 2021, fixes 1 CVE across 8 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0295
87th percentile

Fixed package versions

ProductReleaseFixed in
opensshol 80:8.0p1-10.el8
openssh-askpassol 80:8.0p1-10.el8
openssh-cavsol 80:8.0p1-10.el8
openssh-clientsol 80:8.0p1-10.el8
openssh-keycatol 80:8.0p1-10.el8
openssh-ldapol 80:8.0p1-10.el8
openssh-serverol 80:8.0p1-10.el8
pam_ssh_agent_authol 80:0.10.3-7.10.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2020-14145 openssh-clients: OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems 5.9 0.0295 None reported
Showing 1 to 1 of 1 1