Skip to content
OpenAdvisories
Medium ELSA-2021-4368 1 CVE

Moderate: openssh security update (Oracle Linux 8)

Published Nov 16, 2021 · Updated Nov 16, 2021

Summary

[8.0p1-10]
- sshd -T requires -C when 'Match' is used in sshd_config (#1836277)

[8.0p1-9]
- CVE-2020-14145 openssh: Observable Discrepancy leading to an information
leak in the algorithm negotiation (#1882252)
- Hostbased ssh authentication fails if session ID contains a '/' (#1944125)

[8.0p1-8]
- ssh doesnt restore the blocking mode on standard output (#1942901)

[8.0p1-7 + 0.10.3-7]
- SFTP sort upon the modification time (#1909988)
- ssh-keygen printing fingerprint issue with Windows keys (#1901518)
- PIN is lost when iterating over tokens when adding pkcs11 keys to ssh-agent (#1843372)
- ssh-agent segfaults during ssh-add -s pkcs11 (#1868996)
- ssh-copy-id could not resolve ipv6 address ends with colon (#1933517)
- sshd provides PAM an incorrect error code (#1879503)

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 8 openssh 0:8.0p1-10.el8
Oracle Linux · 8 openssh-askpass 0:8.0p1-10.el8
Oracle Linux · 8 openssh-cavs 0:8.0p1-10.el8
Oracle Linux · 8 openssh-clients 0:8.0p1-10.el8
Oracle Linux · 8 openssh-keycat 0:8.0p1-10.el8
Oracle Linux · 8 openssh-ldap 0:8.0p1-10.el8
Oracle Linux · 8 openssh-server 0:8.0p1-10.el8
Oracle Linux · 8 pam_ssh_agent_auth 0:0.10.3-7.10.el8

Vulnerabilities 1