IBM Security Bulletin: Vulnerabilities in OpenSSH affect AIX (CVE-2015-8325, CVE-2016-6210, CVE-2016-6515)

Vulnerabilities in OpenSSH affect AIX.

CVE(s): CVE-2015-8325, CVE-2016-6210, CVE-2016-6515

Affected product(s) and affected version(s):

        AIX 5.3, 6.1, 7.1, 7.2

        VIOS 2.2.x
        
        The following fileset levels are vulnerable:
        
        key_fileset = osrcaix
        
        Fileset                 Lower Level   Upper Level    KEY
        -------------------------------------------------------------
        openssh.base.client     4.0.0.5200    6.0.0.6202     key_w_fs
        openssh.base.server     4.0.0.5200    6.0.0.6202     key_w_fs
   
        Note:  To determine if your system is vulnerable, execute the
        following commands:

            lslpp -L | grep -i openssh.base.client
            lslpp -L | grep -i openssh.base.server

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://http://aix.software.ibm.com/aix/efixes/security/openssh_advisory9.asc
X-Force Database: http://ift.tt/2dmsq7F
X-Force Database: http://ift.tt/2cwFX6M
X-Force Database: http://ift.tt/2dmsDI3

from IBM Product Security Incident Response Team http://ift.tt/2cwFOQF