ELSA-2019-2143

ELSA-2019-2143 - openssh security, bug fix, and enhancement update

Type:	SECURITY
Impact:	LOW
Release Date:	2019-08-13

Description

[7.4p1-21 + 0.10.3-2]
- Avoid double comma in the default cipher list in FIPS mode (#1722446)

[7.4p1-20 + 0.10.3-2]
- Revert the updating of cached passwd structure (#1712053)

[7.4p1-19 + 0.10.3-2]
- Update cached passwd structure after PAM authentication (#1674541)

[7.4p1-18 + 0.10.3-2]
- invalidate supplemental group cache used by temporarily_use_uid()
when the target uid differs (#1583735)

[7.4p1-17 + 0.10.3-2]
- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)

Related CVEs

CVE-2018-15473

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	openssh-7.4p1-21.el7.src.rpm	ae2f48887ed7275dba618f62e300d946e9ec0d9786c8995f8ff976f9394103a2	ELSA-2024-12233	ol7_aarch64_latest
	openssh-7.4p1-21.el7.src.rpm	ae2f48887ed7275dba618f62e300d946e9ec0d9786c8995f8ff976f9394103a2	ELSA-2024-12233	ol7_aarch64_u7_base
	openssh-7.4p1-21.el7.aarch64.rpm	4a0b9b3d1481c984ac4b7aa3312ab759852c7c1b85e4641e4958074fbc0b859b	ELSA-2024-12233	ol7_aarch64_latest
	openssh-7.4p1-21.el7.aarch64.rpm	4a0b9b3d1481c984ac4b7aa3312ab759852c7c1b85e4641e4958074fbc0b859b	ELSA-2024-12233	ol7_aarch64_u7_base
	openssh-askpass-7.4p1-21.el7.aarch64.rpm	41eb2d7e918910cf5f1e7645d676403aad3c0e991270ecd3c7d2a7b2c270d99c	ELSA-2024-12233	ol7_aarch64_latest
	openssh-askpass-7.4p1-21.el7.aarch64.rpm	41eb2d7e918910cf5f1e7645d676403aad3c0e991270ecd3c7d2a7b2c270d99c	ELSA-2024-12233	ol7_aarch64_u7_base
	openssh-cavs-7.4p1-21.el7.aarch64.rpm	626d03a69ad770ea5288b40351597aa67d5cd1184ef1f00fe9ef2cfd7663f8a9	ELSA-2024-12233	ol7_aarch64_optional_latest
	openssh-clients-7.4p1-21.el7.aarch64.rpm	f1393b8df5f63726b0850af13f6ec99a8178f68edd8dff5c444d9cff1fb07258	ELSA-2024-12233	ol7_aarch64_latest
	openssh-clients-7.4p1-21.el7.aarch64.rpm	f1393b8df5f63726b0850af13f6ec99a8178f68edd8dff5c444d9cff1fb07258	ELSA-2024-12233	ol7_aarch64_u7_base
	openssh-keycat-7.4p1-21.el7.aarch64.rpm	60dbab04a35e2e54929eb745ab74d6dacbfda886187d14a3c9128b8072be1b62	ELSA-2024-12233	ol7_aarch64_latest
	openssh-keycat-7.4p1-21.el7.aarch64.rpm	60dbab04a35e2e54929eb745ab74d6dacbfda886187d14a3c9128b8072be1b62	ELSA-2024-12233	ol7_aarch64_u7_base
	openssh-ldap-7.4p1-21.el7.aarch64.rpm	96e333001dbb9d75f7880a0b6967f2a1ebb8599a5c5320e1bbf9ca931c4f7973	ELSA-2024-12233	ol7_aarch64_optional_latest
	openssh-server-7.4p1-21.el7.aarch64.rpm	82066839feea14ac80644bd213ceed33400cafb0c16c3ace95b50ef5564cef05	ELSA-2024-12233	ol7_aarch64_latest
	openssh-server-7.4p1-21.el7.aarch64.rpm	82066839feea14ac80644bd213ceed33400cafb0c16c3ace95b50ef5564cef05	ELSA-2024-12233	ol7_aarch64_u7_base
	openssh-server-sysvinit-7.4p1-21.el7.aarch64.rpm	844afe59654b76ad9f9365dd73c4cdffb7554dc8166060d96ceb4c7f1a793a68	ELSA-2024-12233	ol7_aarch64_optional_latest
	pam_ssh_agent_auth-0.10.3-2.21.el7.aarch64.rpm	1f2e034d66af57890522071b86ec0d06f1245e1a9ffecaf9e7a180171d756610	ELSA-2024-12233	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	openssh-7.4p1-21.el7.src.rpm	ae2f48887ed7275dba618f62e300d946e9ec0d9786c8995f8ff976f9394103a2	ELSA-2024-12233	ol7_x86_64_latest
	openssh-7.4p1-21.el7.src.rpm	ae2f48887ed7275dba618f62e300d946e9ec0d9786c8995f8ff976f9394103a2	ELSA-2024-12233	ol7_x86_64_u7_base
	openssh-7.4p1-21.el7.x86_64.rpm	e987bf1a66c1d3a86780dd9ebc4e2bc1fdd80c0bb7b2400b4bd439ae28b0a661	ELSA-2024-12233	exadata_dbserver_19.2.10.0.0_x86_64_base
	openssh-7.4p1-21.el7.x86_64.rpm	e987bf1a66c1d3a86780dd9ebc4e2bc1fdd80c0bb7b2400b4bd439ae28b0a661	ELSA-2024-12233	exadata_dbserver_19.2.11.0.0_x86_64_base
	openssh-7.4p1-21.el7.x86_64.rpm	e987bf1a66c1d3a86780dd9ebc4e2bc1fdd80c0bb7b2400b4bd439ae28b0a661	ELSA-2024-12233	exadata_dbserver_19.2.12.0.0_x86_64_base
	openssh-7.4p1-21.el7.x86_64.rpm	e987bf1a66c1d3a86780dd9ebc4e2bc1fdd80c0bb7b2400b4bd439ae28b0a661	ELSA-2024-12233	exadata_dbserver_19.2.13.0.0_x86_64_base
	openssh-7.4p1-21.el7.x86_64.rpm	e987bf1a66c1d3a86780dd9ebc4e2bc1fdd80c0bb7b2400b4bd439ae28b0a661	ELSA-2024-12233	exadata_dbserver_19.2.14.0.0_x86_64_base
	openssh-7.4p1-21.el7.x86_64.rpm	e987bf1a66c1d3a86780dd9ebc4e2bc1fdd80c0bb7b2400b4bd439ae28b0a661	ELSA-2024-12233	exadata_dbserver_19.2.8.0.0_x86_64_base
	openssh-7.4p1-21.el7.x86_64.rpm	e987bf1a66c1d3a86780dd9ebc4e2bc1fdd80c0bb7b2400b4bd439ae28b0a661	ELSA-2024-12233	exadata_dbserver_19.2.9.0.0_x86_64_base
	openssh-7.4p1-21.el7.x86_64.rpm	e987bf1a66c1d3a86780dd9ebc4e2bc1fdd80c0bb7b2400b4bd439ae28b0a661	ELSA-2024-12233	exadata_dbserver_19.3.0.0.0_x86_64_base
	openssh-7.4p1-21.el7.x86_64.rpm	e987bf1a66c1d3a86780dd9ebc4e2bc1fdd80c0bb7b2400b4bd439ae28b0a661	ELSA-2024-12233	exadata_dbserver_19.3.1.0.0_x86_64_base
	openssh-7.4p1-21.el7.x86_64.rpm	e987bf1a66c1d3a86780dd9ebc4e2bc1fdd80c0bb7b2400b4bd439ae28b0a661	ELSA-2024-12233	exadata_dbserver_19.3.2.0.0_x86_64_base
	openssh-7.4p1-21.el7.x86_64.rpm	e987bf1a66c1d3a86780dd9ebc4e2bc1fdd80c0bb7b2400b4bd439ae28b0a661	ELSA-2024-12233	exadata_dbserver_19.3.3.0.0_x86_64_base
	openssh-7.4p1-21.el7.x86_64.rpm	e987bf1a66c1d3a86780dd9ebc4e2bc1fdd80c0bb7b2400b4bd439ae28b0a661	ELSA-2024-12233	exadata_dbserver_19.3.4.0.0_x86_64_base
	openssh-7.4p1-21.el7.x86_64.rpm	e987bf1a66c1d3a86780dd9ebc4e2bc1fdd80c0bb7b2400b4bd439ae28b0a661	ELSA-2024-12233	exadata_dbserver_19.3.5.0.0_x86_64_base
	openssh-7.4p1-21.el7.x86_64.rpm	e987bf1a66c1d3a86780dd9ebc4e2bc1fdd80c0bb7b2400b4bd439ae28b0a661	ELSA-2024-12233	exadata_dbserver_19.3.6.0.0_x86_64_base
	openssh-7.4p1-21.el7.x86_64.rpm	e987bf1a66c1d3a86780dd9ebc4e2bc1fdd80c0bb7b2400b4bd439ae28b0a661	ELSA-2024-12233	exadata_dbserver_19.3.7.0.0_x86_64_base
	openssh-7.4p1-21.el7.x86_64.rpm	e987bf1a66c1d3a86780dd9ebc4e2bc1fdd80c0bb7b2400b4bd439ae28b0a661	ELSA-2024-12233	exadata_dbserver_19.3.8.0.0_x86_64_base
	openssh-7.4p1-21.el7.x86_64.rpm	e987bf1a66c1d3a86780dd9ebc4e2bc1fdd80c0bb7b2400b4bd439ae28b0a661	ELSA-2024-12233	ol7_x86_64_latest
	openssh-7.4p1-21.el7.x86_64.rpm	e987bf1a66c1d3a86780dd9ebc4e2bc1fdd80c0bb7b2400b4bd439ae28b0a661	ELSA-2024-12233	ol7_x86_64_u7_base
	openssh-askpass-7.4p1-21.el7.x86_64.rpm	48e3c2997acaa8ee0c2166dcd917be01495e02b52e6b1cf203e8512d490342a4	ELSA-2024-12233	ol7_x86_64_latest
	openssh-askpass-7.4p1-21.el7.x86_64.rpm	48e3c2997acaa8ee0c2166dcd917be01495e02b52e6b1cf203e8512d490342a4	ELSA-2024-12233	ol7_x86_64_u7_base
	openssh-cavs-7.4p1-21.el7.x86_64.rpm	de5799f99efe6401a26df8a0d01ef6b50a16e7d9f1912a339399da7cfcacfb55	ELSA-2024-12233	ol7_x86_64_optional_latest
	openssh-clients-7.4p1-21.el7.x86_64.rpm	91e55d43cdff5e4266b4a08e9a6a69b9b368f2a88818578bd8176ad50af2f6a1	ELSA-2024-12233	exadata_dbserver_19.2.10.0.0_x86_64_base
	openssh-clients-7.4p1-21.el7.x86_64.rpm	91e55d43cdff5e4266b4a08e9a6a69b9b368f2a88818578bd8176ad50af2f6a1	ELSA-2024-12233	exadata_dbserver_19.2.11.0.0_x86_64_base
	openssh-clients-7.4p1-21.el7.x86_64.rpm	91e55d43cdff5e4266b4a08e9a6a69b9b368f2a88818578bd8176ad50af2f6a1	ELSA-2024-12233	exadata_dbserver_19.2.12.0.0_x86_64_base
	openssh-clients-7.4p1-21.el7.x86_64.rpm	91e55d43cdff5e4266b4a08e9a6a69b9b368f2a88818578bd8176ad50af2f6a1	ELSA-2024-12233	exadata_dbserver_19.2.13.0.0_x86_64_base
	openssh-clients-7.4p1-21.el7.x86_64.rpm	91e55d43cdff5e4266b4a08e9a6a69b9b368f2a88818578bd8176ad50af2f6a1	ELSA-2024-12233	exadata_dbserver_19.2.14.0.0_x86_64_base
	openssh-clients-7.4p1-21.el7.x86_64.rpm	91e55d43cdff5e4266b4a08e9a6a69b9b368f2a88818578bd8176ad50af2f6a1	ELSA-2024-12233	exadata_dbserver_19.2.8.0.0_x86_64_base
	openssh-clients-7.4p1-21.el7.x86_64.rpm	91e55d43cdff5e4266b4a08e9a6a69b9b368f2a88818578bd8176ad50af2f6a1	ELSA-2024-12233	exadata_dbserver_19.2.9.0.0_x86_64_base
	openssh-clients-7.4p1-21.el7.x86_64.rpm	91e55d43cdff5e4266b4a08e9a6a69b9b368f2a88818578bd8176ad50af2f6a1	ELSA-2024-12233	exadata_dbserver_19.3.0.0.0_x86_64_base
	openssh-clients-7.4p1-21.el7.x86_64.rpm	91e55d43cdff5e4266b4a08e9a6a69b9b368f2a88818578bd8176ad50af2f6a1	ELSA-2024-12233	exadata_dbserver_19.3.1.0.0_x86_64_base
	openssh-clients-7.4p1-21.el7.x86_64.rpm	91e55d43cdff5e4266b4a08e9a6a69b9b368f2a88818578bd8176ad50af2f6a1	ELSA-2024-12233	exadata_dbserver_19.3.2.0.0_x86_64_base
	openssh-clients-7.4p1-21.el7.x86_64.rpm	91e55d43cdff5e4266b4a08e9a6a69b9b368f2a88818578bd8176ad50af2f6a1	ELSA-2024-12233	exadata_dbserver_19.3.3.0.0_x86_64_base
	openssh-clients-7.4p1-21.el7.x86_64.rpm	91e55d43cdff5e4266b4a08e9a6a69b9b368f2a88818578bd8176ad50af2f6a1	ELSA-2024-12233	exadata_dbserver_19.3.4.0.0_x86_64_base
	openssh-clients-7.4p1-21.el7.x86_64.rpm	91e55d43cdff5e4266b4a08e9a6a69b9b368f2a88818578bd8176ad50af2f6a1	ELSA-2024-12233	exadata_dbserver_19.3.5.0.0_x86_64_base
	openssh-clients-7.4p1-21.el7.x86_64.rpm	91e55d43cdff5e4266b4a08e9a6a69b9b368f2a88818578bd8176ad50af2f6a1	ELSA-2024-12233	exadata_dbserver_19.3.6.0.0_x86_64_base
	openssh-clients-7.4p1-21.el7.x86_64.rpm	91e55d43cdff5e4266b4a08e9a6a69b9b368f2a88818578bd8176ad50af2f6a1	ELSA-2024-12233	exadata_dbserver_19.3.7.0.0_x86_64_base
	openssh-clients-7.4p1-21.el7.x86_64.rpm	91e55d43cdff5e4266b4a08e9a6a69b9b368f2a88818578bd8176ad50af2f6a1	ELSA-2024-12233	exadata_dbserver_19.3.8.0.0_x86_64_base
	openssh-clients-7.4p1-21.el7.x86_64.rpm	91e55d43cdff5e4266b4a08e9a6a69b9b368f2a88818578bd8176ad50af2f6a1	ELSA-2024-12233	ol7_x86_64_latest
	openssh-clients-7.4p1-21.el7.x86_64.rpm	91e55d43cdff5e4266b4a08e9a6a69b9b368f2a88818578bd8176ad50af2f6a1	ELSA-2024-12233	ol7_x86_64_u7_base
	openssh-keycat-7.4p1-21.el7.x86_64.rpm	0b1aef5f2cf892a5424f916ffd1f03eca6a2176f05bf9238610221b9c2b977ea	ELSA-2024-12233	ol7_x86_64_latest
	openssh-keycat-7.4p1-21.el7.x86_64.rpm	0b1aef5f2cf892a5424f916ffd1f03eca6a2176f05bf9238610221b9c2b977ea	ELSA-2024-12233	ol7_x86_64_u7_base
	openssh-ldap-7.4p1-21.el7.x86_64.rpm	f0a046ee392b252e4d5610d0568488e49314a598247180f64654e0a24b20b853	ELSA-2024-12233	ol7_x86_64_optional_latest
	openssh-server-7.4p1-21.el7.x86_64.rpm	bba10f134141206608d32990ea959adfcf06e2374595d9c3f9da5d1621c040cc	ELSA-2024-12233	exadata_dbserver_19.2.10.0.0_x86_64_base
	openssh-server-7.4p1-21.el7.x86_64.rpm	bba10f134141206608d32990ea959adfcf06e2374595d9c3f9da5d1621c040cc	ELSA-2024-12233	exadata_dbserver_19.2.11.0.0_x86_64_base
	openssh-server-7.4p1-21.el7.x86_64.rpm	bba10f134141206608d32990ea959adfcf06e2374595d9c3f9da5d1621c040cc	ELSA-2024-12233	exadata_dbserver_19.2.12.0.0_x86_64_base
	openssh-server-7.4p1-21.el7.x86_64.rpm	bba10f134141206608d32990ea959adfcf06e2374595d9c3f9da5d1621c040cc	ELSA-2024-12233	exadata_dbserver_19.2.13.0.0_x86_64_base
	openssh-server-7.4p1-21.el7.x86_64.rpm	bba10f134141206608d32990ea959adfcf06e2374595d9c3f9da5d1621c040cc	ELSA-2024-12233	exadata_dbserver_19.2.14.0.0_x86_64_base
	openssh-server-7.4p1-21.el7.x86_64.rpm	bba10f134141206608d32990ea959adfcf06e2374595d9c3f9da5d1621c040cc	ELSA-2024-12233	exadata_dbserver_19.2.8.0.0_x86_64_base
	openssh-server-7.4p1-21.el7.x86_64.rpm	bba10f134141206608d32990ea959adfcf06e2374595d9c3f9da5d1621c040cc	ELSA-2024-12233	exadata_dbserver_19.2.9.0.0_x86_64_base
	openssh-server-7.4p1-21.el7.x86_64.rpm	bba10f134141206608d32990ea959adfcf06e2374595d9c3f9da5d1621c040cc	ELSA-2024-12233	exadata_dbserver_19.3.0.0.0_x86_64_base
	openssh-server-7.4p1-21.el7.x86_64.rpm	bba10f134141206608d32990ea959adfcf06e2374595d9c3f9da5d1621c040cc	ELSA-2024-12233	exadata_dbserver_19.3.1.0.0_x86_64_base
	openssh-server-7.4p1-21.el7.x86_64.rpm	bba10f134141206608d32990ea959adfcf06e2374595d9c3f9da5d1621c040cc	ELSA-2024-12233	exadata_dbserver_19.3.2.0.0_x86_64_base
	openssh-server-7.4p1-21.el7.x86_64.rpm	bba10f134141206608d32990ea959adfcf06e2374595d9c3f9da5d1621c040cc	ELSA-2024-12233	exadata_dbserver_19.3.3.0.0_x86_64_base
	openssh-server-7.4p1-21.el7.x86_64.rpm	bba10f134141206608d32990ea959adfcf06e2374595d9c3f9da5d1621c040cc	ELSA-2024-12233	exadata_dbserver_19.3.4.0.0_x86_64_base
	openssh-server-7.4p1-21.el7.x86_64.rpm	bba10f134141206608d32990ea959adfcf06e2374595d9c3f9da5d1621c040cc	ELSA-2024-12233	exadata_dbserver_19.3.5.0.0_x86_64_base
	openssh-server-7.4p1-21.el7.x86_64.rpm	bba10f134141206608d32990ea959adfcf06e2374595d9c3f9da5d1621c040cc	ELSA-2024-12233	exadata_dbserver_19.3.6.0.0_x86_64_base
	openssh-server-7.4p1-21.el7.x86_64.rpm	bba10f134141206608d32990ea959adfcf06e2374595d9c3f9da5d1621c040cc	ELSA-2024-12233	exadata_dbserver_19.3.7.0.0_x86_64_base
	openssh-server-7.4p1-21.el7.x86_64.rpm	bba10f134141206608d32990ea959adfcf06e2374595d9c3f9da5d1621c040cc	ELSA-2024-12233	exadata_dbserver_19.3.8.0.0_x86_64_base
	openssh-server-7.4p1-21.el7.x86_64.rpm	bba10f134141206608d32990ea959adfcf06e2374595d9c3f9da5d1621c040cc	ELSA-2024-12233	ol7_x86_64_latest
	openssh-server-7.4p1-21.el7.x86_64.rpm	bba10f134141206608d32990ea959adfcf06e2374595d9c3f9da5d1621c040cc	ELSA-2024-12233	ol7_x86_64_u7_base
	openssh-server-sysvinit-7.4p1-21.el7.x86_64.rpm	34796f8870513f5016fb6b856176fba821e37704168bfccfeacf3ecdde073a92	ELSA-2024-12233	ol7_x86_64_optional_latest
	pam_ssh_agent_auth-0.10.3-2.21.el7.i686.rpm	4073d65a8f44f3eb4375d46c26f799e5e0f723d244ee326b2f49c03bb3543ec6	ELSA-2024-12233	ol7_x86_64_optional_latest
	pam_ssh_agent_auth-0.10.3-2.21.el7.x86_64.rpm	b3f93b375ac53e35c7a0920e6fc51cd3904a401e29d1188d407f1c0a13b2dd69	ELSA-2024-12233	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team