Summary
[8.0p1-24.0.1]
- Update upstream references [Orabug: 36587718]
[8.0p1-24]
- Providing a kill switch for scp to deal with CVE-2020-15778
Resolves: RHEL-22870
[8.0p1-23]
- Fix Terrapin attack
Resolves: RHEL-19308
[8.0p1-22]
- Fix Terrapin attack
Resolves: RHEL-19308
- Forbid shell metasymbols in username/hostname
Resolves: RHEL-19788
[8.0p1-21]
- Using DigestSign/DigestVerify functions for better FIPS compatibility
Resolves: RHEL-5217
[8.0p1-20]
- Limit artificial delays in sshd while login using AD user
Resolves: RHEL-1684
- Add comment to OpenSSH server config about FIPS-incompatible key
Resolves: RHEL-5221
- Avoid killing all processes on system in case of race condition
Resolves: RHEL-11548
- Avoid sshd_config 256K limit
Resolves: RHEL-5279
- Using DigestSign/DigestVerify functions for better FIPS compatibility
Resolves: RHEL-5217
- Fix GSS KEX causing ssh failures when connecting to WinSSHD
Resolves: RHEL-5321
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | openssh | 0:8.0p1-24.0.1.el8 |
| Oracle Linux · 8 | openssh-askpass | 0:8.0p1-24.0.1.el8 |
| Oracle Linux · 8 | openssh-cavs | 0:8.0p1-24.0.1.el8 |
| Oracle Linux · 8 | openssh-clients | 0:8.0p1-24.0.1.el8 |
| Oracle Linux · 8 | openssh-keycat | 0:8.0p1-24.0.1.el8 |
| Oracle Linux · 8 | openssh-ldap | 0:8.0p1-24.0.1.el8 |
| Oracle Linux · 8 | openssh-server | 0:8.0p1-24.0.1.el8 |
| Oracle Linux · 8 | pam_ssh_agent_auth | 0:0.10.3-7.24.0.1.el8 |
Vulnerabilities 1
-
High 7.8
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick chara…