RHSA-2015:2088Medium

Red Hat Security Advisory: openssh security, bug fix, and enhancement update

Published
November 19, 2015
Last Modified
November 5, 2026

🔗 CVE IDs covered (3)

CVE-2015-5600 →CVE-2015-6563 →CVE-2015-6564 →

📋 Description

CVE-2015-5600 — openssh: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices CVE-2015-6563 — openssh: Privilege separation weakness related to PAM support CVE-2015-6564 — openssh: Use-after-free bug related to PAM support

🎯 Affected products104

  • Red Hat Enterprise Linux Client (v. 7)
  • Red Hat Enterprise Linux Client Optional (v. 7)
  • Red Hat Enterprise Linux ComputeNode (v. 7)
  • Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Enterprise Linux Server Optional (v. 7)
  • Red Hat Enterprise Linux Workstation (v. 7)
  • Red Hat Enterprise Linux Workstation Optional (v. 7)
  • openssh-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • openssh-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • openssh-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)
  • openssh-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)
  • openssh-0:6.6.1p1-22.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)
  • openssh-0:6.6.1p1-22.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • openssh-0:6.6.1p1-22.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)
  • openssh-0:6.6.1p1-22.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • openssh-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)
  • openssh-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • openssh-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • openssh-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • openssh-askpass-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • openssh-askpass-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • openssh-askpass-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)
  • openssh-askpass-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)
  • openssh-askpass-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)
  • openssh-askpass-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • openssh-askpass-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • openssh-askpass-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • openssh-clients-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • openssh-clients-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • +74 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: This issue can be mitigated by disabling keyboard-interactive authentication method. That can be achieved by setting "ChallengeResponseAuthentication no" in the /etc/ssh/sshd_config configuration file and restarting the sshd service.

🔗 References (15)