ELSA-2017-2029

ELSA-2017-2029 - openssh security, bug fix, and enhancement update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2017-08-07

Description

[7.4p1-11 + 0.10.3-1]
- Compiler warnings (#1341754)

[7.4p1-10 + 0.10.3-1]
- Add missing messages in FIPS mode (#1341754)

[7.4p1-9 + 0.10.3-1]
- Allow harmless syscalls for s390 crypto modules (#1451809)

[7.4p1-8 + 0.10.3-1]
- Fix multilib issue in documentation (#1450361)

[7.4p1-6 + 0.10.3-1]
- ControlPath too long should not be a fatal error (#1447561)

[7.4p1-5 + 0.10.3-1]
- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)

[7.4p1-4 + 0.10.3-1]
- Update seccomp filter to work on ppc64le (#1443916)

[7.4p1-3 + 0.10.3-1]
- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches

[7.4p1-2 + 0.10.3-1]
- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5

[7.4p1-1 + 0.10.3-1]
- Rebase to openssh 7.4 and pam_ssh_agent_auth 0.10.3 (#1341754)
- detach -cavs subpackage
- enable seccomp filter for sandboxed child

Related CVEs

CVE-2016-10009

CVE-2016-6515

CVE-2016-10011

CVE-2016-10012

CVE-2016-6210

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	openssh-7.4p1-11.el7.src.rpm	23a05849f7e1cdcaf12ddbc798205826	ELSA-2019-2143
	openssh-7.4p1-11.el7.aarch64.rpm	0c300bc71d6496688dc673f5c2ce92a3	ELSA-2019-2143
	openssh-askpass-7.4p1-11.el7.aarch64.rpm	3d6946c2f3d0f018492cfd03a0e5453e	ELSA-2019-2143
	openssh-cavs-7.4p1-11.el7.aarch64.rpm	5c5728002498e5e3771bdb1775b9f12b	ELSA-2019-2143
	openssh-clients-7.4p1-11.el7.aarch64.rpm	b3a164e49a0815960f0fb53d86863a1e	ELSA-2019-2143
	openssh-keycat-7.4p1-11.el7.aarch64.rpm	fb006b64bbfebc07416915e56ca8897c	ELSA-2019-2143
	openssh-ldap-7.4p1-11.el7.aarch64.rpm	69a5eeaca1b363bd89665fef74c54c4a	ELSA-2019-2143
	openssh-server-7.4p1-11.el7.aarch64.rpm	85ace15194c4d100f515505990cca81c	ELSA-2019-2143
	openssh-server-sysvinit-7.4p1-11.el7.aarch64.rpm	372ff1a8c53380cfd28d83918bace671	ELSA-2019-2143
	pam_ssh_agent_auth-0.10.3-1.11.el7.aarch64.rpm	e72a26ce29a84028b04804a3bab2e2f9	ELSA-2019-2143
Oracle Linux 7 (x86_64)	openssh-7.4p1-11.el7.src.rpm	23a05849f7e1cdcaf12ddbc798205826	ELSA-2019-2143
	openssh-7.4p1-11.el7.x86_64.rpm	1d80dcf4ad953cc80b14d9283684d96b	ELSA-2019-2143
	openssh-askpass-7.4p1-11.el7.x86_64.rpm	8beffa1ad122e107230c6c062cbcde14	ELSA-2019-2143
	openssh-cavs-7.4p1-11.el7.x86_64.rpm	e8077106e96929853610de78c46b69c7	ELSA-2019-2143
	openssh-clients-7.4p1-11.el7.x86_64.rpm	3996ad12bdc6aae30b64035b7138d03c	ELSA-2019-2143
	openssh-keycat-7.4p1-11.el7.x86_64.rpm	1a6a5fa60f241cf714e51f7d4fcabfe2	ELSA-2019-2143
	openssh-ldap-7.4p1-11.el7.x86_64.rpm	b4712fa64c833bd565d0d283fd469dc8	ELSA-2019-2143
	openssh-server-7.4p1-11.el7.x86_64.rpm	0d5af0c4193eef437a4e7b7f1fefbb66	ELSA-2019-2143
	openssh-server-sysvinit-7.4p1-11.el7.x86_64.rpm	22bddaa641a22b06da1bed5abc7e3081	ELSA-2019-2143
	pam_ssh_agent_auth-0.10.3-1.11.el7.i686.rpm	8780fcc48713fa9597607706b6ea2512	ELSA-2019-2143
	pam_ssh_agent_auth-0.10.3-1.11.el7.x86_64.rpm	c897ceaf276c3ffa7c16ef876c539caa	ELSA-2019-2143

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team