ELSA-2016-0465

ELSA-2016-0465 - openssh security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2016-03-21

Description

[6.6.1p1-25 + 0.9.3-9]
- CVE-2016-1908: possible fallback from untrusted to trusted X11 forwarding (#1298741)

[6.6.1p1-24 + 0.9.3-9]
- CVE-2016-3115: missing sanitisation of input for X11 forwarding (#1317818)

Related CVEs

CVE-2016-3115

CVE-2016-1908

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	openssh-6.6.1p1-25.el7_2.src.rpm	2ffc53bb95006d8a855e66c5b1c156c54351ba54fdf79cc196b014dfb04dfeff	ELSA-2024-12233	ol7_x86_64_latest_archive
	openssh-6.6.1p1-25.el7_2.src.rpm	2ffc53bb95006d8a855e66c5b1c156c54351ba54fdf79cc196b014dfb04dfeff	ELSA-2024-12233	ol7_x86_64_optional_archive
	openssh-6.6.1p1-25.el7_2.src.rpm	2ffc53bb95006d8a855e66c5b1c156c54351ba54fdf79cc196b014dfb04dfeff	ELSA-2024-12233	ol7_x86_64_u2_patch
	openssh-6.6.1p1-25.el7_2.x86_64.rpm	6561310c232aa4890c474218677b6ed3be7633604a5c78d3413f81c859e12319	ELSA-2024-12233	ol7_x86_64_latest_archive
	openssh-6.6.1p1-25.el7_2.x86_64.rpm	6561310c232aa4890c474218677b6ed3be7633604a5c78d3413f81c859e12319	ELSA-2024-12233	ol7_x86_64_u2_patch
	openssh-askpass-6.6.1p1-25.el7_2.x86_64.rpm	24ce3f014e90fc4d584eea703fbda4cba6c9f424adbcc4ac368a5a194a20660b	ELSA-2024-12233	ol7_x86_64_latest_archive
	openssh-askpass-6.6.1p1-25.el7_2.x86_64.rpm	24ce3f014e90fc4d584eea703fbda4cba6c9f424adbcc4ac368a5a194a20660b	ELSA-2024-12233	ol7_x86_64_u2_patch
	openssh-clients-6.6.1p1-25.el7_2.x86_64.rpm	432150f917933b326ee2f6a31a3379ebafa014acc32e1d261ee138e3254a23b6	ELSA-2024-12233	ol7_x86_64_latest_archive
	openssh-clients-6.6.1p1-25.el7_2.x86_64.rpm	432150f917933b326ee2f6a31a3379ebafa014acc32e1d261ee138e3254a23b6	ELSA-2024-12233	ol7_x86_64_u2_patch
	openssh-keycat-6.6.1p1-25.el7_2.x86_64.rpm	48695d8577250e8d04869f567e9d632f6f1587a9968da9946d4b12d7798ec562	ELSA-2024-12233	ol7_x86_64_latest_archive
	openssh-keycat-6.6.1p1-25.el7_2.x86_64.rpm	48695d8577250e8d04869f567e9d632f6f1587a9968da9946d4b12d7798ec562	ELSA-2024-12233	ol7_x86_64_u2_patch
	openssh-ldap-6.6.1p1-25.el7_2.x86_64.rpm	c49b2e7f724dc7b0a279c6087e28237f4140ec32ef5399aa767596e109347859	ELSA-2024-12233	ol7_x86_64_optional_archive
	openssh-server-6.6.1p1-25.el7_2.x86_64.rpm	3ba109a8d74a6c1e0958fc3bdf34facdb2f4584ebda431f11f42f55bb85903df	ELSA-2024-12233	ol7_x86_64_latest_archive
	openssh-server-6.6.1p1-25.el7_2.x86_64.rpm	3ba109a8d74a6c1e0958fc3bdf34facdb2f4584ebda431f11f42f55bb85903df	ELSA-2024-12233	ol7_x86_64_u2_patch
	openssh-server-sysvinit-6.6.1p1-25.el7_2.x86_64.rpm	6f67ad894a8df54f3e848e88ae8d5574b423978a959190bf1acedfb2f87470b9	ELSA-2024-12233	ol7_x86_64_optional_archive
	pam_ssh_agent_auth-0.9.3-9.25.el7_2.i686.rpm	9c57054de065647393cd2e4138204244a6e7ae0bf455619dba0d722c4bbd4396	ELSA-2024-12233	ol7_x86_64_optional_archive
	pam_ssh_agent_auth-0.9.3-9.25.el7_2.x86_64.rpm	c931299079b983d56a44ed928d8e8e21c77f621e3fa7cfca71eedc3ac41ac181	ELSA-2024-12233	ol7_x86_64_optional_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team