Поиск уязвимостей

ALT-PU-2024-9513: package `openssh-gostcrypto` update to version 9.6p1-alt2.gost

** DISPUTED ** An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose, and an attacker has silently modified the server to support the None authentication option, then the user cannot determine whether FIDO authentication is going to confirm that the user wishes to connect to that server, or that the user wishes to allow that server to connect to a different server on the user's behalf. NOTE: the vendor's position is "this is not an authentication bypass, since nothing is being bypassed."

Уязвимость сервера средства криптографической защиты OpenSSH, позволяющая нарушителю выполнить атаку MITM

Security update for openssh

Security update for openssh

Security update for openssh

Security update for openssh

Security update for openssh

Security update for openssh

Security update for openssh

Security update for openssh-openssl1

Security update for openssh

Moderate: openssh security, bug fix, and enhancement update

sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.

ELSA-2022-2013: openssh security, bug fix, and enhancement update (MODERATE)

ELSA-2021-9575: openssh security update (MODERATE)

ELSA-2021-4782: openssh security update (MODERATE)

Уязвимость средства криптографической защиты OpenSSH, связанная с небезопасным управлением привилегиями, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

Уязвимость openssh

Уязвимость openssh