<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">Hi Michael,<div><br></div><div>Check if you have openssh-8.0p1-24.el8.x86_64 installed.</div><div>This is the RH version of the OpenSSH package that includes the fix.</div><div>See: <a href="https://access.redhat.com/errata/RHSA-2024:3166">https://access.redhat.com/errata/RHSA-2024:3166</a></div><div><br></div><div>Best regards,</div><div><br></div><div>Taco Scargo<br id="lineBreakAtBeginningOfMessage"><div><br><blockquote type="cite"><div>On 14 Jun 2024, at 09:08, Michael Aronoff via Blueonyx <blueonyx@mail.blueonyx.it> wrote:</div><br class="Apple-interchange-newline"><div><meta charset="UTF-8"><div style="caret-color: rgb(0, 0, 0); font-family: Calibri; font-size: 21.333334px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">I have a server that needs to pass a PCI Compliance scan. It passes everything except an issue with OpenSSH that I am not sure how to mitigate.</div><div style="caret-color: rgb(0, 0, 0); font-family: Calibri; font-size: 21.333334px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><br></div><div style="caret-color: rgb(0, 0, 0); font-family: Calibri; font-size: 21.333334px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">The results show that the CVE ID is CVE-2020-15778</div><div style="caret-color: rgb(0, 0, 0); font-family: Calibri; font-size: 21.333334px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15778">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15778</a></div><div style="caret-color: rgb(0, 0, 0); font-family: Calibri; font-size: 21.333334px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><br></div><div style="caret-color: rgb(0, 0, 0); font-family: Calibri; font-size: 21.333334px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">The threat description is:</div><div style="caret-color: rgb(0, 0, 0); font-family: Calibri; font-size: 21.333334px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><br></div><blockquote style="caret-color: rgb(0, 0, 0); font-family: Calibri; font-size: 21.333334px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; margin: 0px 0px 0px 40px; border: medium; padding: 0px;"><div>OpenSSH (OpenBSD Secure Shell) is a set of computer programs providing encrypted communication sessions over a computer network using the SSH protocol.</div><div><br></div><div>OpenSSH contains the following vulnerabilities:</div><div>OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows. Affected Versions:</div><div>OpenSSH versions prior to 8.3</div><div><br></div></blockquote><span style="caret-color: rgb(0, 0, 0); font-family: Calibri; font-size: 21.333334px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">Anyone know if this can be fixed on a 5210R so it passes PCI Compliance?</span><br style="caret-color: rgb(0, 0, 0); font-family: Calibri; font-size: 21.333334px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="caret-color: rgb(0, 0, 0); font-family: Calibri; font-size: 21.333334px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><br></div><div id="signature_old" style="caret-color: rgb(0, 0, 0); font-family: Calibri; font-size: 21.333334px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; clear: both;"><div id="xb51b3f532a9243e"><div id="xedcd1f00142d498fb02d0a5dd88924ea"><div class="plain_line" style="background-color: rgba(0, 0, 0, 0);">Thanks,<span> </span></div><div class="plain_line" style="background-color: rgba(0, 0, 0, 0);">________________________________</div><div class="plain_line" style="background-color: rgba(0, 0, 0, 0);">M Aronoff Out – <a href="mailto:maronoff@gmail.com">maronoff@gmail.com</a> </div><div class="plain_line" style="background-color: rgba(0, 0, 0, 0);"> </div><div class="plain_line" style="background-color: rgba(0, 0, 0, 0);">I'm a great believer in luck, and I find </div><div class="plain_line" style="background-color: rgba(0, 0, 0, 0);">the harder I work the more I have of it.</div><div class="plain_line" style="background-color: rgba(0, 0, 0, 0);"> - Thomas Jefferson</div></div></div></div><div style="caret-color: rgb(0, 0, 0); font-family: Calibri; font-size: 21.333334px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><br></div><span style="caret-color: rgb(0, 0, 0); font-family: Calibri; font-size: 21.333334px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: Calibri; font-size: 21.333334px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="caret-color: rgb(0, 0, 0); font-family: Calibri; font-size: 21.333334px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">Blueonyx mailing list</span><br style="caret-color: rgb(0, 0, 0); font-family: Calibri; font-size: 21.333334px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><a href="mailto:Blueonyx@mail.blueonyx.it" style="font-family: Calibri; font-size: 21.333334px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">Blueonyx@mail.blueonyx.it</a><br style="caret-color: rgb(0, 0, 0); font-family: Calibri; font-size: 21.333334px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><a href="http://mail.blueonyx.it/mailman/listinfo/blueonyx" style="font-family: Calibri; font-size: 21.333334px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">http://mail.blueonyx.it/mailman/listinfo/blueonyx</a></div></blockquote></div><br></div></body></html>