OVMSA-2016-0048

OVMSA-2016-0048 - openssh security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2016-05-13

Description

[5.3p1-117]
- CVE-2016-3115: missing sanitisation of input for X11 forwarding (#1317817)

[5.3p1-116]
- Restore functionallity of pam_ssh_agent_auth in FIPS mode (#1278315)
- Initialize devices_done variable for challenge response (#1281468)
- Update behaviour of X11 forwarding to match upstream (#1299048)

[5.3p1-115]
- Ammends previous release, fixing typos and behaviour changes

Related CVEs

CVE-2015-6563

CVE-2015-6564

CVE-2016-1908

CVE-2015-5352

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle VM 3.3 (x86_64)	openssh-5.3p1-117.el6.src.rpm	7baea3e8138c9587dfacf6e89d5677ba	OVMSA-2019-0013
	openssh-5.3p1-117.el6.x86_64.rpm	3f23f58626a10f4537bf95ea810ae885	OVMSA-2019-0013
	openssh-clients-5.3p1-117.el6.x86_64.rpm	c5656e01d671568e60ea19df17106181	OVMSA-2019-0013
	openssh-server-5.3p1-117.el6.x86_64.rpm	a377b677246c18fd0db5e7a3b93fed12	OVMSA-2019-0013
Oracle VM 3.4 (x86_64)	openssh-5.3p1-117.el6.src.rpm	7baea3e8138c9587dfacf6e89d5677ba	OVMSA-2019-0013
	openssh-5.3p1-117.el6.x86_64.rpm	3f23f58626a10f4537bf95ea810ae885	OVMSA-2019-0013
	openssh-clients-5.3p1-117.el6.x86_64.rpm	c5656e01d671568e60ea19df17106181	OVMSA-2019-0013
	openssh-server-5.3p1-117.el6.x86_64.rpm	a377b677246c18fd0db5e7a3b93fed12	OVMSA-2019-0013

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team