Security Bulletin: Public disclosed vulnerability from OpenSSL and OpenSSH affects IBM Netezza Host Management

CVEID: CVE-2016-6210
DESCRIPTION: A covert timing channel flaw was found in the way OpenSSH handled authentication of non-existent users. A remote unauthenticated attacker could possibly use this flaw to determine valid user names by measuring the timing of server responses.
CVSS Base Score: 5.3
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

CVEID: CVE-2015-8325
DESCRIPTION: It was discovered that the OpenSSH sshd daemon fetched PAM environment settings before running the login program. In configurations with UseLogin=yes and the pam_env PAM module configured to read user environment settings, a local user could use this flaw to execute arbitrary code as root.
CVSS Base Score: 7
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)

NOTE : OpenSSL and OpenSSH rpms from RedHat are included in Host Management release 5.4.24 and thus there is a expected change in versioning of rpms. The naming convention for RedHat is different and thus a different package version is expected. The latest OpenSSL package i.e 1.0.1e-57 and OpenSSH package openssh-5.3p1-123 is free from any security vulnerability.