Linux · Security advisory · May 23, 2024

ELSA-2024-3166: Security update for 8 packages

ELSA-2024-3166, released May 23, 2024, fixes 1 CVE across 8 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1368
96th percentile

Fixed package versions

ProductReleaseFixed in
opensshol 80:8.0p1-24.0.1.el8
openssh-askpassol 80:8.0p1-24.0.1.el8
openssh-cavsol 80:8.0p1-24.0.1.el8
openssh-clientsol 80:8.0p1-24.0.1.el8
openssh-keycatol 80:8.0p1-24.0.1.el8
openssh-ldapol 80:8.0p1-24.0.1.el8
openssh-serverol 80:8.0p1-24.0.1.el8
pam_ssh_agent_authol 80:0.10.3-7.24.0.1.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-15778 openssh: OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems 7.8 0.1368 None reported
Showing 1 to 1 of 1 1