Skip to content
OpenAdvisories
Low ELSA-2019-2143 1 CVE

Low: openssh security, bug fix, and enhancement update (Oracle Linux 7)

Published Aug 13, 2019 · Updated Aug 13, 2019

Ecosystem: Oracle Linux

Summary

[7.4p1-21 + 0.10.3-2]
- Avoid double comma in the default cipher list in FIPS mode (#1722446)

[7.4p1-20 + 0.10.3-2]
- Revert the updating of cached passwd structure (#1712053)

[7.4p1-19 + 0.10.3-2]
- Update cached passwd structure after PAM authentication (#1674541)

[7.4p1-18 + 0.10.3-2]
- invalidate supplemental group cache used by temporarily_use_uid()
when the target uid differs (#1583735)

[7.4p1-17 + 0.10.3-2]
- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)

Fixed packages 9

ReleasePackageFixed in
Oracle Linux · 7 openssh 0:7.4p1-21.el7
Oracle Linux · 7 openssh-askpass 0:7.4p1-21.el7
Oracle Linux · 7 openssh-cavs 0:7.4p1-21.el7
Oracle Linux · 7 openssh-clients 0:7.4p1-21.el7
Oracle Linux · 7 openssh-keycat 0:7.4p1-21.el7
Oracle Linux · 7 openssh-ldap 0:7.4p1-21.el7
Oracle Linux · 7 openssh-server 0:7.4p1-21.el7
Oracle Linux · 7 openssh-server-sysvinit 0:7.4p1-21.el7
Oracle Linux · 7 pam_ssh_agent_auth 0:0.10.3-2.21.el7

Vulnerabilities 1