Summary
[7.4p1-11 + 0.10.3-1]
- Compiler warnings (#1341754)
[7.4p1-10 + 0.10.3-1]
- Add missing messages in FIPS mode (#1341754)
[7.4p1-9 + 0.10.3-1]
- Allow harmless syscalls for s390 crypto modules (#1451809)
[7.4p1-8 + 0.10.3-1]
- Fix multilib issue in documentation (#1450361)
[7.4p1-6 + 0.10.3-1]
- ControlPath too long should not be a fatal error (#1447561)
[7.4p1-5 + 0.10.3-1]
- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)
[7.4p1-4 + 0.10.3-1]
- Update seccomp filter to work on ppc64le (#1443916)
[7.4p1-3 + 0.10.3-1]
- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches
[7.4p1-2 + 0.10.3-1]
- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5
[7.4p1-1 + 0.10.3-1]
- Rebase to openssh 7.4 and pam_ssh_agent_auth 0.10.3 (#1341754)
- detach -cavs subpackage
- enable seccomp filter for sandboxed child
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | openssh | 0:7.4p1-11.el7 |
| Oracle Linux · 7 | openssh-askpass | 0:7.4p1-11.el7 |
| Oracle Linux · 7 | openssh-cavs | 0:7.4p1-11.el7 |
| Oracle Linux · 7 | openssh-clients | 0:7.4p1-11.el7 |
| Oracle Linux · 7 | openssh-keycat | 0:7.4p1-11.el7 |
| Oracle Linux · 7 | openssh-ldap | 0:7.4p1-11.el7 |
| Oracle Linux · 7 | openssh-server | 0:7.4p1-11.el7 |
| Oracle Linux · 7 | openssh-server-sysvinit | 0:7.4p1-11.el7 |
| Oracle Linux · 7 | pam_ssh_agent_auth | 0:0.10.3-1.11.el7 |
Vulnerabilities 5
-
High 7.8
The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensur…
-
High 7.3
Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execut…
-
Medium 6.2
authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which mi…
-
Medium 5.9
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static…
-
Unscored —
The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password …