ELSA-2016-3531

ELSA-2016-3531 - openssh security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2016-04-03

Description

[4.3p2-82.0.2]
- CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices (John Haxby) [orabug 22985024]
- CVE-2016-3115: missing sanitisation of input for X11 forwarding (John Haxby) [orabug 22985024]

Related CVEs

CVE-2016-3115

CVE-2015-5600

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	openssh-4.3p2-82.0.2.el5.src.rpm	68dbb75bd4dbce8bb3c0994aef27953e1023d0dea36132db69a1a1b621f0ab88	-	ol5_i386_latest
	openssh-4.3p2-82.0.2.el5.src.rpm	68dbb75bd4dbce8bb3c0994aef27953e1023d0dea36132db69a1a1b621f0ab88	-	ol5_u11_i386_patch
	openssh-4.3p2-82.0.2.el5.i386.rpm	65c4e26bec22d5c1b4f232b5f68036f8f20ee85a4aac33befdb0e15074664438	-	ol5_i386_latest
	openssh-4.3p2-82.0.2.el5.i386.rpm	65c4e26bec22d5c1b4f232b5f68036f8f20ee85a4aac33befdb0e15074664438	-	ol5_u11_i386_patch
	openssh-askpass-4.3p2-82.0.2.el5.i386.rpm	c1740e8dee8bb67c73194f9ca88672d6cecfc7876b8e9228c5564da328135826	-	ol5_i386_latest
	openssh-askpass-4.3p2-82.0.2.el5.i386.rpm	c1740e8dee8bb67c73194f9ca88672d6cecfc7876b8e9228c5564da328135826	-	ol5_u11_i386_patch
	openssh-clients-4.3p2-82.0.2.el5.i386.rpm	522d401d773809a8c395888e245958199ac2c8ce816ffedfd9916bd49a9ef9f5	-	ol5_i386_latest
	openssh-clients-4.3p2-82.0.2.el5.i386.rpm	522d401d773809a8c395888e245958199ac2c8ce816ffedfd9916bd49a9ef9f5	-	ol5_u11_i386_patch
	openssh-server-4.3p2-82.0.2.el5.i386.rpm	b8437d12da5fd9330968aeaddf35ba8b9fc68ae5194bd45c874d541ad41c058e	-	ol5_i386_latest
	openssh-server-4.3p2-82.0.2.el5.i386.rpm	b8437d12da5fd9330968aeaddf35ba8b9fc68ae5194bd45c874d541ad41c058e	-	ol5_u11_i386_patch
Oracle Linux 5 (ia64)	openssh-4.3p2-82.0.2.el5.src.rpm	68dbb75bd4dbce8bb3c0994aef27953e1023d0dea36132db69a1a1b621f0ab88	-	ol5_ia64_latest
	openssh-4.3p2-82.0.2.el5.src.rpm	68dbb75bd4dbce8bb3c0994aef27953e1023d0dea36132db69a1a1b621f0ab88	-	ol5_u11_ia64_patch
	openssh-4.3p2-82.0.2.el5.ia64.rpm	1d47d16993f612672a363ae48d5869b32353b3bcfe07aac863f4d768dea2b232	-	ol5_ia64_latest
	openssh-4.3p2-82.0.2.el5.ia64.rpm	1d47d16993f612672a363ae48d5869b32353b3bcfe07aac863f4d768dea2b232	-	ol5_u11_ia64_patch
	openssh-askpass-4.3p2-82.0.2.el5.ia64.rpm	fc8f2943103060142e9e1eacc3dfc839db4d71aa7965c39221e045553e79837d	-	ol5_ia64_latest
	openssh-askpass-4.3p2-82.0.2.el5.ia64.rpm	fc8f2943103060142e9e1eacc3dfc839db4d71aa7965c39221e045553e79837d	-	ol5_u11_ia64_patch
	openssh-clients-4.3p2-82.0.2.el5.ia64.rpm	cbe900cadda8284bdcb8e53de54df7660e9a46a541e47c7b71b0b897bedb3a76	-	ol5_ia64_latest
	openssh-clients-4.3p2-82.0.2.el5.ia64.rpm	cbe900cadda8284bdcb8e53de54df7660e9a46a541e47c7b71b0b897bedb3a76	-	ol5_u11_ia64_patch
	openssh-server-4.3p2-82.0.2.el5.ia64.rpm	c2f211b69fb2cb7d647cfbbc4ba4ba2f5cc2bb366d363e92e781ab1c26eaffe0	-	ol5_ia64_latest
	openssh-server-4.3p2-82.0.2.el5.ia64.rpm	c2f211b69fb2cb7d647cfbbc4ba4ba2f5cc2bb366d363e92e781ab1c26eaffe0	-	ol5_u11_ia64_patch
Oracle Linux 5 (x86_64)	openssh-4.3p2-82.0.2.el5.src.rpm	68dbb75bd4dbce8bb3c0994aef27953e1023d0dea36132db69a1a1b621f0ab88	-	ol5_u11_x86_64_patch
	openssh-4.3p2-82.0.2.el5.src.rpm	68dbb75bd4dbce8bb3c0994aef27953e1023d0dea36132db69a1a1b621f0ab88	-	ol5_x86_64_latest
	openssh-4.3p2-82.0.2.el5.x86_64.rpm	5e8cc2bf65a2f9c2f3a50531a7f238f7e3906fc81644a1f4ebad3a1b57d340c1	-	ol5_u11_x86_64_patch
	openssh-4.3p2-82.0.2.el5.x86_64.rpm	5e8cc2bf65a2f9c2f3a50531a7f238f7e3906fc81644a1f4ebad3a1b57d340c1	-	ol5_x86_64_latest
	openssh-askpass-4.3p2-82.0.2.el5.x86_64.rpm	9000c8a598db6f858c10c77470dd119d38706ff58522dd571d95d51b17c85a77	-	ol5_u11_x86_64_patch
	openssh-askpass-4.3p2-82.0.2.el5.x86_64.rpm	9000c8a598db6f858c10c77470dd119d38706ff58522dd571d95d51b17c85a77	-	ol5_x86_64_latest
	openssh-clients-4.3p2-82.0.2.el5.x86_64.rpm	13bfbaa084a97e7e31c0515a6367e687dd6fc391768a025d22556ec7d3720de1	-	ol5_u11_x86_64_patch
	openssh-clients-4.3p2-82.0.2.el5.x86_64.rpm	13bfbaa084a97e7e31c0515a6367e687dd6fc391768a025d22556ec7d3720de1	-	ol5_x86_64_latest
	openssh-server-4.3p2-82.0.2.el5.x86_64.rpm	4e78b9fe5903efb0393acdc5a31143823818a156b016bbea008afe4a7310fc14	-	ol5_u11_x86_64_patch
	openssh-server-4.3p2-82.0.2.el5.x86_64.rpm	4e78b9fe5903efb0393acdc5a31143823818a156b016bbea008afe4a7310fc14	-	ol5_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team