Summary
[7.4p1-23.0.1]
- enlarge format buffer size for certificate serial
number so the log message can record any 64-bit integer without
truncation (openssh bz#3012) [Orabug: 30448895]
[7.4p1-23 + 0.10.3-2]
- Avoid remote code execution in ssh-agent PKCS#11 support
Resolves: CVE-2023-38408
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | openssh | 0:7.4p1-23.0.1.el7_9 |
| Oracle Linux · 7 | openssh-askpass | 0:7.4p1-23.0.1.el7_9 |
| Oracle Linux · 7 | openssh-cavs | 0:7.4p1-23.0.1.el7_9 |
| Oracle Linux · 7 | openssh-clients | 0:7.4p1-23.0.1.el7_9 |
| Oracle Linux · 7 | openssh-keycat | 0:7.4p1-23.0.1.el7_9 |
| Oracle Linux · 7 | openssh-ldap | 0:7.4p1-23.0.1.el7_9 |
| Oracle Linux · 7 | openssh-server | 0:7.4p1-23.0.1.el7_9 |
| Oracle Linux · 7 | openssh-server-sysvinit | 0:7.4p1-23.0.1.el7_9 |
| Oracle Linux · 7 | pam_ssh_agent_auth | 0:0.10.3-2.23.0.1.el7_9 |
Vulnerabilities 1
-
Critical 9.8
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remo…