ELBA-2024-24913

ELBA-2024-24913 - gsi-openssh Bug Fix update

Type:	BUG
Severity:	NA
Release Date:	2024-07-23

Description

[8.0p1-15]
- Add scp symlink in gsisshd's path

[8.0p1-14]
- Based on openssh-8.0p1-24.el8
- Drop patch openssh-8.0p1-sshbuf-readonly.patch (now included in
openssh-8.0p1-gssapi-keyex.patch)

[8.0p1-13]
- Based on openssh-8.0p1-19.el8_8

[8.0p1-12]
- Based on openssh-8.0p1-17.el8_7

[8.0p1-11]
- Based on openssh-8.0p1-16.el8

[8.0p1-10]
- Based on openssh-8.0p1-13.el8

[8.0p1-9]
- Based on openssh-8.0p1-10.el8

[8.0p1-8]
- Based on openssh-8.0p1-6.el8_4.2

[8.0p1-7]
- Fix issue with read-only ssh buffer during gssapi key exchange
- Clean up HPN patch

[8.0p1-6]
- Based on openssh-8.0p1-5.el8

[8.0p1-5]
- Update HPN patch with additional documentation and configuration and a
version number fix

[8.0p1-4]
- Add HPN patch

[8.0p1-3]
- Add missing buffer initialization in gsissh patch

[8.0p1-2]
- Based on openssh-8.0p1-4.el8

[8.0p1-1]
- Based on openssh-8.0p1-3.el8

[7.8p1-5]
- Based on openssh-7.8p1-4.el8

[7.8p1-4]
- Remove usage statistics collection support

[7.8p1-3]
- CVE-2019-7639

[7.8p1-2]
- Based on openssh-7.8p1-4.fc28

[7.8p1-1]
- Based on openssh-7.8p1-3.fc28

[7.7p1-5]
- Based on openssh-7.7p1-6.fc28

[7.7p1-4.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[7.7p1-4]
- Based on openssh-7.7p1-5.fc28

[7.7p1-3]
- Based on openssh-7.7p1-3.fc28

[7.7p1-2]
- Based on openssh-7.7p1-2.fc28

[7.7p1-1]
- Based on openssh-7.7p1-1.fc28

[7.6p1-5.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[7.6p1-5]
- Based on openssh-7.6p1-6.fc28

[7.6p1-4.1]
- Rebuilt for switch to libxcrypt

[7.6p1-4]
- Based on openssh-7.6p1-5.1.fc28

[7.6p1-3]
- Based on openssh-7.6p1-4.fc28

[7.6p1-2]
- Based on openssh-7.6p1-3.fc27

[7.6p1-1]
- Based on openssh-7.6p1-2.fc27

[7.5p1-3]
- Based on openssh-7.5p1-5.fc27

[7.5p1-2]
- Based on openssh-7.5p1-3.fc26
- Update GSI patch with more openssl 1.1.0 fixes from Globus

[7.5p1-1.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[7.5p1-1]
- Based on openssh-7.5p1-2.fc26

[7.4p1-4]
- Based on openssh-7.4p1-4.fc25

[7.4p1-3]
- Based on openssh-7.4p1-3.fc25
- Remove MON_ONCE from the monitoring flags for MONITOR_REQ_GSSCHECKMIC
(rhbz #1423000)

[7.4p1-2]
- Based on openssh-7.4p1-2.fc25

[7.4p1-1]
- Based on openssh-7.4p1-1.fc25

[7.3p1-5]
- Adding mechanism OID negotiation with the introduction of micv2 OID

[7.3p1-4]
- Based on openssh-7.3p1-7.fc25

[7.3p1-3]
- Based on openssh-7.3p1-5.fc26

[7.3p1-2]
- Based on openssh-7.3p1-4.fc25

[7.3p1-1]
- Based on openssh-7.3p1-3.fc25

[7.2p2-6]
- Based on openssh-7.2p2-10.fc24

[7.2p2-5]
- Based on openssh-7.2p2-9.fc24

[7.2p2-4]
- Based on openssh-7.2p2-8.fc24

[7.2p2-3]
- Based on openssh-7.2p2-5.fc24

[7.2p2-2]
- Based on openssh-7.2p2-4.fc24

[7.2p2-1]
- Based on openssh-7.2p2-2.fc23

[7.2p1-1]
- Based on openssh-7.2p1-2.fc23

[7.1p2-4]
- Based on openssh-7.1p2-4.fc23

[7.1p2-3.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[7.1p2-3]
- Based on openssh-7.1p2-3.fc23

[7.1p2-2]
- Based on openssh-7.1p2-2.fc23

[7.1p2-1]
- Based on openssh-7.1p2-1.fc23

[7.1p1-2]
- Based on openssh-7.1p1-3.fc23

[7.1p1-1]
- Based on openssh-7.1p1-1.fc23

[7.0p1-1]
- Based on openssh-7.0p1-1.fc23

[6.9p1-3]
- Based on openssh-6.9p1-4.fc22

[6.9p1-2]
- Based on openssh-6.9p1-3.fc22

[6.9p1-1]
- Based on openssh-6.9p1-1.fc22

[6.8p1-2.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[6.8p1-2]
- Based on openssh-6.8p1-5.fc22

[6.8p1-1]
- Based on openssh-6.8p1-4.fc22

[6.6.1p1-5]
- Based on openssh-6.6.1p1-12.fc21

[6.6.1p1-4]
- Based on openssh-6.6.1p1-11.1.fc21

[6.6.1p1-3]
- Based on openssh-6.6.1p1-8.fc21

[6.6.1p1-2]
- Based on openssh-6.6.1p1-5.fc21

[6.6.1p1-1.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[6.6.1p1-1]
- Based on openssh-6.6.1p1-2.fc21

[6.4p1-3]
- Based on openssh-6.4p1-4.fc20

[6.4p1-2.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[6.4p1-2]
- Based on openssh-6.4p1-3.fc20

[6.4p1-1]
- Based on openssh-6.4p1-2.fc20

[6.3p1-2]
- Add obsoletes for -fips packages

[6.3p1-1]
- Based on openssh-6.3p1-1.fc20

[6.2p2-3]
- Based on openssh-6.2p2-8.fc20

[6.2p2-2]
- Based on openssh-6.2p2-5.fc19

[6.2p2-1.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[6.2p2-1]
- Based on openssh-6.2p2-3.fc19

[6.2p1-3]
- Based on openssh-6.2p1-4.fc19

[6.2p1-2]
- Based on openssh-6.2p1-3.fc19

[6.2p1-1]
- Based on openssh-6.2p1-2.fc19

[6.1p1-5]
- Based on openssh-6.1p1-7.fc19
- Security fix for vulnerability
http://grid.ncsa.illinois.edu/ssh/pamuserchange-2013-01.adv
https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2013-5168

[6.1p1-4]
- Based on openssh-6.1p1-6.fc18

[6.1p1-3.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

[6.1p1-3]
- Based on openssh-6.1p1-4.fc18

[6.1p1-2]
- Based on openssh-6.1p1-2.fc18

[6.1p1-1]
- Based on openssh-6.1p1-1.fc18

[6.0p1-1]
- Based on openssh-6.0p1-1.fc18

[5.9p1-7]
- Based on openssh-5.9p1-26.fc17

[5.9p1-6.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[5.9p1-6]
- Based on openssh-5.9p1-22.fc17

[5.9p1-5]
- Based on openssh-5.9p1-19.fc17

[5.9p1-4]
- Drop openssh-5.8p2-unblock-signals.patch - not needed for GT >= 5.2
- Based on openssh-5.9p1-16.fc17

[5.9p1-3.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[5.9p1-3]
- Based on openssh-5.9p1-13.fc17

[5.9p1-2]
- Based on openssh-5.9p1-11.fc17

[5.9p1-1]
- Initial packaging
- Based on openssh-5.9p1-7.fc17

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	gsi-openssh-8.0p1-15.el8.src.rpm	affa8273f3f23b2d4710102fc804a8e8	-	ol8_x86_64_developer_EPEL
	gsi-openssh-8.0p1-15.el8.x86_64.rpm	2f007f8ccf9000e9ec25caad6cf5ab5f	-	ol8_x86_64_developer_EPEL
	gsi-openssh-clients-8.0p1-15.el8.x86_64.rpm	744255bc9be2ebac7d16c22fb6cf62ce	-	ol8_x86_64_developer_EPEL
	gsi-openssh-server-8.0p1-15.el8.x86_64.rpm	b2efffd7953ff6e2b76929dc5cd245e8	-	ol8_x86_64_developer_EPEL