ELSA-2017-2029

ELSA-2017-2029 - openssh security, bug fix, and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2017-08-07

Description

[7.4p1-11 + 0.10.3-1]
- Compiler warnings (#1341754)

[7.4p1-10 + 0.10.3-1]
- Add missing messages in FIPS mode (#1341754)

[7.4p1-9 + 0.10.3-1]
- Allow harmless syscalls for s390 crypto modules (#1451809)

[7.4p1-8 + 0.10.3-1]
- Fix multilib issue in documentation (#1450361)

[7.4p1-6 + 0.10.3-1]
- ControlPath too long should not be a fatal error (#1447561)

[7.4p1-5 + 0.10.3-1]
- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)

[7.4p1-4 + 0.10.3-1]
- Update seccomp filter to work on ppc64le (#1443916)

[7.4p1-3 + 0.10.3-1]
- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches

[7.4p1-2 + 0.10.3-1]
- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5

[7.4p1-1 + 0.10.3-1]
- Rebase to openssh 7.4 and pam_ssh_agent_auth 0.10.3 (#1341754)
- detach -cavs subpackage
- enable seccomp filter for sandboxed child

Related CVEs

CVE-2016-10009

CVE-2016-10011

CVE-2016-10012

CVE-2016-6210

CVE-2016-6515

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	openssh-7.4p1-11.el7.src.rpm	bb2cb9e0881084e9b482434e5c2b9d4b9c10c778714c2c392f3e9ee7ddc294ba	ELSA-2024-12233	ol7_aarch64_latest
	openssh-7.4p1-11.el7.src.rpm	bb2cb9e0881084e9b482434e5c2b9d4b9c10c778714c2c392f3e9ee7ddc294ba	ELSA-2024-12233	ol7_aarch64_optional_latest
	openssh-7.4p1-11.el7.aarch64.rpm	b17f1c9ceb79b9b1e62e5de37370217cc460df3f0a6c5aa205d0257fbff80199	ELSA-2024-12233	ol7_aarch64_latest
	openssh-askpass-7.4p1-11.el7.aarch64.rpm	b79a216b62569ad944523577c573de64c35b7460787867b6a0c1c5560baae5af	ELSA-2024-12233	ol7_aarch64_latest
	openssh-cavs-7.4p1-11.el7.aarch64.rpm	223654c0b3da66277e1b957dbfe5dacc69e59d569fcee7408f58c2d59021c290	ELSA-2024-12233	ol7_aarch64_optional_latest
	openssh-clients-7.4p1-11.el7.aarch64.rpm	a66ac43349e17fb82d7f83d1d6c68837bad543a73e1d8be5625c5837ce4eaf4b	ELSA-2024-12233	ol7_aarch64_latest
	openssh-keycat-7.4p1-11.el7.aarch64.rpm	d1af9bbd3d68e1e1659ca15081760df0d3c8dd3becddda7075471e4036fe4690	ELSA-2024-12233	ol7_aarch64_latest
	openssh-ldap-7.4p1-11.el7.aarch64.rpm	14cc912a83ecbcfe66378fb9e16030d51e52fd6f2d6048e0a13ae63e7076d82d	ELSA-2024-12233	ol7_aarch64_optional_latest
	openssh-server-7.4p1-11.el7.aarch64.rpm	5d2f35f9fa145131e891e7f0254436f682b996daa999f17890492f6da1b0c643	ELSA-2024-12233	ol7_aarch64_latest
	openssh-server-sysvinit-7.4p1-11.el7.aarch64.rpm	ef3d3e50f7b3ff81f5228ef5c05a3b173feda213d6c17480e82df84fb4d8ab80	ELSA-2024-12233	ol7_aarch64_optional_latest
	pam_ssh_agent_auth-0.10.3-1.11.el7.aarch64.rpm	4b9bb14a34857da9ea7f2672974f9dbefc51401a9716b388a24ca9e9233e680c	ELSA-2024-12233	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	openssh-7.4p1-11.el7.src.rpm	bb2cb9e0881084e9b482434e5c2b9d4b9c10c778714c2c392f3e9ee7ddc294ba	ELSA-2024-12233	ol7_x86_64_latest_archive
	openssh-7.4p1-11.el7.src.rpm	bb2cb9e0881084e9b482434e5c2b9d4b9c10c778714c2c392f3e9ee7ddc294ba	ELSA-2024-12233	ol7_x86_64_optional_archive
	openssh-7.4p1-11.el7.src.rpm	bb2cb9e0881084e9b482434e5c2b9d4b9c10c778714c2c392f3e9ee7ddc294ba	ELSA-2024-12233	ol7_x86_64_u4_base
	openssh-7.4p1-11.el7.x86_64.rpm	8c02e030ffe11db7de864fe8e07fa1e4784f55b685346d2bc3293445967b4758	ELSA-2024-12233	ol7_x86_64_latest_archive
	openssh-7.4p1-11.el7.x86_64.rpm	8c02e030ffe11db7de864fe8e07fa1e4784f55b685346d2bc3293445967b4758	ELSA-2024-12233	ol7_x86_64_u4_base
	openssh-askpass-7.4p1-11.el7.x86_64.rpm	cf253c749e20b3db6a304a26ea751044b4d56060969ee33e140fd6be674f4d0f	ELSA-2024-12233	ol7_x86_64_latest_archive
	openssh-askpass-7.4p1-11.el7.x86_64.rpm	cf253c749e20b3db6a304a26ea751044b4d56060969ee33e140fd6be674f4d0f	ELSA-2024-12233	ol7_x86_64_u4_base
	openssh-cavs-7.4p1-11.el7.x86_64.rpm	b3b448fd829893dfbbec5a8358e617222390199288d389ab2f690b2bcf9f3f01	ELSA-2024-12233	ol7_x86_64_optional_archive
	openssh-clients-7.4p1-11.el7.x86_64.rpm	67418e206b53a35bbb69f40f92033982c41194653070857844a15e452dc3dfd2	ELSA-2024-12233	ol7_x86_64_latest_archive
	openssh-clients-7.4p1-11.el7.x86_64.rpm	67418e206b53a35bbb69f40f92033982c41194653070857844a15e452dc3dfd2	ELSA-2024-12233	ol7_x86_64_u4_base
	openssh-keycat-7.4p1-11.el7.x86_64.rpm	3e3ed36f574f740939cd4ce9470dfe60dde12ae21ee369a90ab643655acab4fd	ELSA-2024-12233	ol7_x86_64_latest_archive
	openssh-keycat-7.4p1-11.el7.x86_64.rpm	3e3ed36f574f740939cd4ce9470dfe60dde12ae21ee369a90ab643655acab4fd	ELSA-2024-12233	ol7_x86_64_u4_base
	openssh-ldap-7.4p1-11.el7.x86_64.rpm	c8068bce8533355c732d0502551fe5346db91bb66b55eb3f851a57a25aff3e06	ELSA-2024-12233	ol7_x86_64_optional_archive
	openssh-server-7.4p1-11.el7.x86_64.rpm	b73e6e5248acbbb9c52dbf80a674b20fc032dc820d3c1363a643f67fd4635946	ELSA-2024-12233	ol7_x86_64_latest_archive
	openssh-server-7.4p1-11.el7.x86_64.rpm	b73e6e5248acbbb9c52dbf80a674b20fc032dc820d3c1363a643f67fd4635946	ELSA-2024-12233	ol7_x86_64_u4_base
	openssh-server-sysvinit-7.4p1-11.el7.x86_64.rpm	eb103f15640d39338f4074de40ab1fe5bfa203b6e36cf176aa3fd20b6fb251e5	ELSA-2024-12233	ol7_x86_64_optional_archive
	pam_ssh_agent_auth-0.10.3-1.11.el7.i686.rpm	3514d840d7b7a847bd0d5707d45cf3bfac993ce83374c69e16bc5730eaa92e17	ELSA-2024-12233	ol7_x86_64_optional_archive
	pam_ssh_agent_auth-0.10.3-1.11.el7.x86_64.rpm	6c0b972d172d4781d5531cc51138c35f9c1596a31a95d50702322eb67b79266c	ELSA-2024-12233	ol7_x86_64_optional_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team