ELSA-2009-1287

ELSA-2009-1287 - openssh security, bug fix, and enhancement update

Type:	SECURITY
Severity:	LOW
Release Date:	2009-09-08

Description

[4.3p2-36]
- tiny change in chroot sftp capability into openssh-server solve ls speed problem (#440240)

[4.3p2-35]
- workaround to plaintext recovery attack against CBC ciphers CVE-2008-5161 (#502230)

[4.3p2-34]
- disable protocol 1 in the FIPS mode

[4.3p2-33]
- fix scp hangup on exit (#454812)
- call integrity checks only on binaries which are part of the OpenSSH FIPS
modules

[4.3p2-32]
- log if FIPS mode is initialized (#492363)
- check the integrity of the binaries in the FIPS mode (#467268)

[4.3p2-31]
- fix ssh hangup on exit (#454812)

[4.3p2-30]
- add chroot sftp capability into openssh-server (#440240)

Related CVEs

CVE-2008-5161

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	openssh-4.3p2-36.el5.src.rpm	477403ae551d857833da67b54dad9ab8	ELSA-2016-3531
	openssh-4.3p2-36.el5.i386.rpm	f444cd5f8ab2e1bf3157531556b7f6ad	ELSA-2016-3531
	openssh-askpass-4.3p2-36.el5.i386.rpm	74ee7d3acfccb884e3cdea876c944add	ELSA-2016-3531
	openssh-clients-4.3p2-36.el5.i386.rpm	7a1a18bbd74a26a913bfff4d1b3da9b1	ELSA-2016-3531
	openssh-server-4.3p2-36.el5.i386.rpm	90a801f190ff526c1d9d4dd7aea7a9c1	ELSA-2016-3531
Oracle Linux 5 (ia64)	openssh-4.3p2-36.el5.src.rpm	477403ae551d857833da67b54dad9ab8	ELSA-2016-3531
	openssh-4.3p2-36.el5.ia64.rpm	b426b216d4da94a0587e91534488c173	ELSA-2016-3531
	openssh-askpass-4.3p2-36.el5.ia64.rpm	50bd2ce08fffbb9b785b87be7fdf4486	ELSA-2016-3531
	openssh-clients-4.3p2-36.el5.ia64.rpm	d66072f2a627694383a63475b83b4182	ELSA-2016-3531
	openssh-server-4.3p2-36.el5.ia64.rpm	314d0ad8a3b09af64b3df5a612313ae4	ELSA-2016-3531
Oracle Linux 5 (x86_64)	openssh-4.3p2-36.el5.src.rpm	477403ae551d857833da67b54dad9ab8	ELSA-2016-3531
	openssh-4.3p2-36.el5.x86_64.rpm	1d3bc0002fdb0127eb8dc9a7755b7e04	ELSA-2016-3531
	openssh-askpass-4.3p2-36.el5.x86_64.rpm	51ac9d6e2188cac6b340a010aed9a280	ELSA-2016-3531
	openssh-clients-4.3p2-36.el5.x86_64.rpm	2cbdd2a49a68e163c1a0198243223088	ELSA-2016-3531
	openssh-server-4.3p2-36.el5.x86_64.rpm	667f2b3311e184ea30d7b68e13df30d7	ELSA-2016-3531

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team