Summary
[7.4p1-22.0.1_fips]
- Change Epoch from 1 to 10
- Enable fips KDF POST [Orabug: 32461750]
- Disable diffie-hellman-group-exchange-sha256 KEX FIPS method [Orabug: 32461739]
[7.4p1-22.0.1]
- enlarge format buffer size for certificate serial
number so the log message can record any 64-bit integer without
truncation (openssh bz#3012) [Orabug: 30448895]
[7.4p1-22 + 0.10.3-2]
- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | openssh | 10:7.4p1-22.0.1.el7_9_fips |
| Oracle Linux · 7 | openssh-askpass | 10:7.4p1-22.0.1.el7_9_fips |
| Oracle Linux · 7 | openssh-cavs | 10:7.4p1-22.0.1.el7_9_fips |
| Oracle Linux · 7 | openssh-clients | 10:7.4p1-22.0.1.el7_9_fips |
| Oracle Linux · 7 | openssh-keycat | 10:7.4p1-22.0.1.el7_9_fips |
| Oracle Linux · 7 | openssh-ldap | 10:7.4p1-22.0.1.el7_9_fips |
| Oracle Linux · 7 | openssh-server | 10:7.4p1-22.0.1.el7_9_fips |
| Oracle Linux · 7 | openssh-server-sysvinit | 10:7.4p1-22.0.1.el7_9_fips |
| Oracle Linux · 7 | pam_ssh_agent_auth | 10:0.10.3-2.22.0.1.el7_9_fips |
Vulnerabilities 1
-
Unscored —CVE-2021-41617 Public exploit
sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalati…