ELSA-2016-0741

ELSA-2016-0741 - openssh security, bug fix, and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2016-05-12

Description

[5.3p1-117]
- CVE-2016-3115: missing sanitisation of input for X11 forwarding (#1317817)

[5.3p1-116]
- Restore functionallity of pam_ssh_agent_auth in FIPS mode (#1278315)
- Initialize devices_done variable for challenge response (#1281468)
- Update behaviour of X11 forwarding to match upstream (#1299048)

[5.3p1-115]
- Ammends previous release, fixing typos and behaviour changes

Related CVEs

CVE-2016-1908

CVE-2015-6563

CVE-2015-6564

CVE-2015-5352

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	openssh-5.3p1-117.el6.src.rpm	4f3bbae0268cbe173762239d9cc5b03f40c4c79082c48fb8eae0edbd3160de2b	ELSA-2023-4428	ol6_i386_latest_archive
	openssh-5.3p1-117.el6.src.rpm	4f3bbae0268cbe173762239d9cc5b03f40c4c79082c48fb8eae0edbd3160de2b	ELSA-2023-4428	ol6_u8_i386_base
	openssh-5.3p1-117.el6.i686.rpm	5819060b9b05112cc02b7e6d478a03616e0cc3c2fab06b523a24bac9e885af5e	ELSA-2023-4428	ol6_i386_latest_archive
	openssh-5.3p1-117.el6.i686.rpm	5819060b9b05112cc02b7e6d478a03616e0cc3c2fab06b523a24bac9e885af5e	ELSA-2023-4428	ol6_u8_i386_base
	openssh-askpass-5.3p1-117.el6.i686.rpm	e611b172f4adc87074bc137cf4e396eb78d67ca527b1f9be11b276d6d3b4d6c7	ELSA-2023-4428	ol6_i386_latest_archive
	openssh-askpass-5.3p1-117.el6.i686.rpm	e611b172f4adc87074bc137cf4e396eb78d67ca527b1f9be11b276d6d3b4d6c7	ELSA-2023-4428	ol6_u8_i386_base
	openssh-clients-5.3p1-117.el6.i686.rpm	1b9ea003a6b1526cf1da8c4f1f547346ce443673daec5286596451782b98e246	ELSA-2023-4428	ol6_i386_latest_archive
	openssh-clients-5.3p1-117.el6.i686.rpm	1b9ea003a6b1526cf1da8c4f1f547346ce443673daec5286596451782b98e246	ELSA-2023-4428	ol6_u8_i386_base
	openssh-ldap-5.3p1-117.el6.i686.rpm	7bead63bc76c713d39c9da46d05f99bb5fc2ec3017b5c814866fc1ff1b690ccc	ELSA-2023-4428	ol6_i386_latest_archive
	openssh-ldap-5.3p1-117.el6.i686.rpm	7bead63bc76c713d39c9da46d05f99bb5fc2ec3017b5c814866fc1ff1b690ccc	ELSA-2023-4428	ol6_u8_i386_base
	openssh-server-5.3p1-117.el6.i686.rpm	0bab0e713c2bbd2d9e923550252a7a56a278e53778dde816b34212a7fb6f4f43	ELSA-2023-4428	ol6_i386_latest_archive
	openssh-server-5.3p1-117.el6.i686.rpm	0bab0e713c2bbd2d9e923550252a7a56a278e53778dde816b34212a7fb6f4f43	ELSA-2023-4428	ol6_u8_i386_base
	pam_ssh_agent_auth-0.9.3-117.el6.i686.rpm	e82a48e71db253dfaf99b98df85f4053bc8aa8869dec50e8f9e982623f27970b	ELSA-2023-4428	ol6_i386_latest_archive
	pam_ssh_agent_auth-0.9.3-117.el6.i686.rpm	e82a48e71db253dfaf99b98df85f4053bc8aa8869dec50e8f9e982623f27970b	ELSA-2023-4428	ol6_u8_i386_base
Oracle Linux 6 (x86_64)	openssh-5.3p1-117.el6.src.rpm	4f3bbae0268cbe173762239d9cc5b03f40c4c79082c48fb8eae0edbd3160de2b	ELSA-2023-4428	ol6_u8_x86_64_base
	openssh-5.3p1-117.el6.src.rpm	4f3bbae0268cbe173762239d9cc5b03f40c4c79082c48fb8eae0edbd3160de2b	ELSA-2023-4428	ol6_x86_64_latest_archive
	openssh-5.3p1-117.el6.x86_64.rpm	980901aafa306de4f3b21aa2a87cf0d1602adb4ba965e9898dc861b1e3a7e4c4	ELSA-2023-4428	ol6_u8_x86_64_base
	openssh-5.3p1-117.el6.x86_64.rpm	980901aafa306de4f3b21aa2a87cf0d1602adb4ba965e9898dc861b1e3a7e4c4	ELSA-2023-4428	ol6_x86_64_latest_archive
	openssh-askpass-5.3p1-117.el6.x86_64.rpm	2d76038b7be91556bdf0a7e34fa4c56ff7abc1add0d7e35f12cc91adcd9860e3	ELSA-2023-4428	ol6_u8_x86_64_base
	openssh-askpass-5.3p1-117.el6.x86_64.rpm	2d76038b7be91556bdf0a7e34fa4c56ff7abc1add0d7e35f12cc91adcd9860e3	ELSA-2023-4428	ol6_x86_64_latest_archive
	openssh-clients-5.3p1-117.el6.x86_64.rpm	2610bd42d2f4452a3e6f96cc863bbca65646b01e6437fe068e920e73f14c5a3d	ELSA-2023-4428	ol6_u8_x86_64_base
	openssh-clients-5.3p1-117.el6.x86_64.rpm	2610bd42d2f4452a3e6f96cc863bbca65646b01e6437fe068e920e73f14c5a3d	ELSA-2023-4428	ol6_x86_64_latest_archive
	openssh-ldap-5.3p1-117.el6.x86_64.rpm	3f8d4f6ae10c1a3e3f07ae1cb08595176c15742acbedf51cddc0e1c1faf689cc	ELSA-2023-4428	ol6_u8_x86_64_base
	openssh-ldap-5.3p1-117.el6.x86_64.rpm	3f8d4f6ae10c1a3e3f07ae1cb08595176c15742acbedf51cddc0e1c1faf689cc	ELSA-2023-4428	ol6_x86_64_latest_archive
	openssh-server-5.3p1-117.el6.x86_64.rpm	ec4e7735bf79b12f82ece4ac107a7160b3f00caa9a14303c6a08d38ab0fc9197	ELSA-2023-4428	ol6_u8_x86_64_base
	openssh-server-5.3p1-117.el6.x86_64.rpm	ec4e7735bf79b12f82ece4ac107a7160b3f00caa9a14303c6a08d38ab0fc9197	ELSA-2023-4428	ol6_x86_64_latest_archive
	pam_ssh_agent_auth-0.9.3-117.el6.i686.rpm	e82a48e71db253dfaf99b98df85f4053bc8aa8869dec50e8f9e982623f27970b	ELSA-2023-4428	ol6_u8_x86_64_base
	pam_ssh_agent_auth-0.9.3-117.el6.i686.rpm	e82a48e71db253dfaf99b98df85f4053bc8aa8869dec50e8f9e982623f27970b	ELSA-2023-4428	ol6_x86_64_latest_archive
	pam_ssh_agent_auth-0.9.3-117.el6.x86_64.rpm	31d45e9abe663f756f8dbd48569f94b92b1e6584bee0195d90bf0d8422b5f0f3	ELSA-2023-4428	ol6_u8_x86_64_base
	pam_ssh_agent_auth-0.9.3-117.el6.x86_64.rpm	31d45e9abe663f756f8dbd48569f94b92b1e6584bee0195d90bf0d8422b5f0f3	ELSA-2023-4428	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team