ELSA-2018-0980

ELSA-2018-0980 - openssh security, bug fix, and enhancement update

Type:	SECURITY
Severity:	LOW
Release Date:	2018-04-16

Description

[7.4p1-16 + 0.10.3-2]
- Fix for CVE-2017-15906 (#1517226)

[7.4p1-15 + 0.10.3-2]
- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)

[7.4p1-14 + 0.10.3-2]
- Rebuilt for RHEL-7.5

Related CVEs

CVE-2017-15906

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	openssh-7.4p1-16.el7.src.rpm	04c786fc114c176f00e29f36ae44aeef	ELSA-2019-2143
	openssh-7.4p1-16.el7.aarch64.rpm	734b788db42b644e18f6b54419f9089c	ELSA-2019-2143
	openssh-askpass-7.4p1-16.el7.aarch64.rpm	2a043e9d9a8f949843380e7a5a1b1ed0	ELSA-2019-2143
	openssh-cavs-7.4p1-16.el7.aarch64.rpm	1110a058f5c9306639f3995bf0348ab9	ELSA-2019-2143
	openssh-clients-7.4p1-16.el7.aarch64.rpm	57ddc6a00497c1cbeb139cd10fa69cb0	ELSA-2019-2143
	openssh-keycat-7.4p1-16.el7.aarch64.rpm	dd6f1ee61d02fe016da73ff23f7f064d	ELSA-2019-2143
	openssh-ldap-7.4p1-16.el7.aarch64.rpm	b46648f62bfadb00b62bc58f427adc69	ELSA-2019-2143
	openssh-server-7.4p1-16.el7.aarch64.rpm	99d91b77adfa298b749c2d6e5e340cf4	ELSA-2019-2143
	openssh-server-sysvinit-7.4p1-16.el7.aarch64.rpm	f2ef5f59263c6793608c4b34338b3851	ELSA-2019-2143
	pam_ssh_agent_auth-0.10.3-2.16.el7.aarch64.rpm	443a623982d08cb3216c5083c5a2aec1	ELSA-2019-2143
Oracle Linux 7 (x86_64)	openssh-7.4p1-16.el7.src.rpm	04c786fc114c176f00e29f36ae44aeef	ELSA-2019-2143
	openssh-7.4p1-16.el7.x86_64.rpm	7e2f5a6f51de12bfb8a10a25ec952f7b	ELSA-2019-2143
	openssh-askpass-7.4p1-16.el7.x86_64.rpm	f66783639d61b40c7be8a2c2937db2f3	ELSA-2019-2143
	openssh-cavs-7.4p1-16.el7.x86_64.rpm	c92e82a93acec2c7c9acce4ef4ebcfe4	ELSA-2019-2143
	openssh-clients-7.4p1-16.el7.x86_64.rpm	288bfff7cc7c10a6b9f4ceea0334dd97	ELSA-2019-2143
	openssh-keycat-7.4p1-16.el7.x86_64.rpm	dfda36d18500327d3040e2beeb98f735	ELSA-2019-2143
	openssh-ldap-7.4p1-16.el7.x86_64.rpm	65c18ee07698cfb926a4bda86bde8779	ELSA-2019-2143
	openssh-server-7.4p1-16.el7.x86_64.rpm	c9d3154748fdd659f85dc9b73237a6ad	ELSA-2019-2143
	openssh-server-sysvinit-7.4p1-16.el7.x86_64.rpm	c0416f2078dd50ee64fa8fb70da6309b	ELSA-2019-2143
	pam_ssh_agent_auth-0.10.3-2.16.el7.i686.rpm	c5439778b5f723a08c126b2bdcd117a6	ELSA-2019-2143
	pam_ssh_agent_auth-0.10.3-2.16.el7.x86_64.rpm	9d90ceb09db58b387d7cc6907403718d	ELSA-2019-2143

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team