Summary
[8.0p1-10]
- sshd -T requires -C when 'Match' is used in sshd_config (#1836277)
[8.0p1-9]
- CVE-2020-14145 openssh: Observable Discrepancy leading to an information
leak in the algorithm negotiation (#1882252)
- Hostbased ssh authentication fails if session ID contains a '/' (#1944125)
[8.0p1-8]
- ssh doesnt restore the blocking mode on standard output (#1942901)
[8.0p1-7 + 0.10.3-7]
- SFTP sort upon the modification time (#1909988)
- ssh-keygen printing fingerprint issue with Windows keys (#1901518)
- PIN is lost when iterating over tokens when adding pkcs11 keys to ssh-agent (#1843372)
- ssh-agent segfaults during ssh-add -s pkcs11 (#1868996)
- ssh-copy-id could not resolve ipv6 address ends with colon (#1933517)
- sshd provides PAM an incorrect error code (#1879503)
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | openssh | 0:8.0p1-10.el8 |
| Oracle Linux · 8 | openssh-askpass | 0:8.0p1-10.el8 |
| Oracle Linux · 8 | openssh-cavs | 0:8.0p1-10.el8 |
| Oracle Linux · 8 | openssh-clients | 0:8.0p1-10.el8 |
| Oracle Linux · 8 | openssh-keycat | 0:8.0p1-10.el8 |
| Oracle Linux · 8 | openssh-ldap | 0:8.0p1-10.el8 |
| Oracle Linux · 8 | openssh-server | 0:8.0p1-10.el8 |
| Oracle Linux · 8 | pam_ssh_agent_auth | 0:0.10.3-7.10.el8 |
Vulnerabilities 1
-
Medium 5.9
The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorith…