RLSA-2019:3702

Synopsis

Moderate: openssh security, bug fix, and enhancement update

Description

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

The following packages have been upgraded to a later upstream version: openssh (8.0p1). (BZ#1691045)

Security Fix(es):

* openssh: scp client improper directory name validation (CVE-2018-20685)

* openssh: Improper validation of object names allows malicious server to overwrite files via scp client (CVE-2019-6111)

* openssh: Missing character encoding in progress display allows for spoofing of scp client output (CVE-2019-6109)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.

Affected products

Rocky Linux 8 aarch64 Rocky Linux 8 x86_64

Fixes

1665785 1666119 1666127

CVEs

CVE-2018-20685 CVE-2019-6109 CVE-2019-6111

Affected packages

Rocky Linux 8 aarch64 - BaseOS

openssh-0:8.0p1-30.el8_10.aarch64.rpm openssh-0:8.0p1-30.el8_10.src.rpm openssh-cavs-0:8.0p1-30.el8_10.aarch64.rpm openssh-cavs-debuginfo-0:8.0p1-30.el8_10.aarch64.rpm openssh-clients-0:8.0p1-30.el8_10.aarch64.rpm openssh-clients-debuginfo-0:8.0p1-30.el8_10.aarch64.rpm openssh-debuginfo-0:8.0p1-30.el8_10.aarch64.rpm openssh-debugsource-0:8.0p1-30.el8_10.aarch64.rpm openssh-keycat-0:8.0p1-30.el8_10.aarch64.rpm openssh-keycat-debuginfo-0:8.0p1-30.el8_10.aarch64.rpm openssh-ldap-0:8.0p1-30.el8_10.aarch64.rpm openssh-ldap-debuginfo-0:8.0p1-30.el8_10.aarch64.rpm openssh-server-0:8.0p1-30.el8_10.aarch64.rpm openssh-server-debuginfo-0:8.0p1-30.el8_10.aarch64.rpm pam_ssh_agent_auth-0:0.10.3-7.30.el8_10.aarch64.rpm pam_ssh_agent_auth-debuginfo-0:0.10.3-7.30.el8_10.aarch64.rpm

Rocky Linux 8 x86_64 - BaseOS

openssh-0:8.0p1-30.el8_10.src.rpm openssh-0:8.0p1-30.el8_10.x86_64.rpm openssh-cavs-0:8.0p1-30.el8_10.x86_64.rpm openssh-cavs-debuginfo-0:8.0p1-30.el8_10.x86_64.rpm openssh-clients-0:8.0p1-30.el8_10.x86_64.rpm openssh-clients-debuginfo-0:8.0p1-30.el8_10.x86_64.rpm openssh-debuginfo-0:8.0p1-30.el8_10.x86_64.rpm openssh-debugsource-0:8.0p1-30.el8_10.x86_64.rpm openssh-keycat-0:8.0p1-30.el8_10.x86_64.rpm openssh-keycat-debuginfo-0:8.0p1-30.el8_10.x86_64.rpm openssh-ldap-0:8.0p1-30.el8_10.x86_64.rpm openssh-ldap-debuginfo-0:8.0p1-30.el8_10.x86_64.rpm openssh-server-0:8.0p1-30.el8_10.x86_64.rpm openssh-server-debuginfo-0:8.0p1-30.el8_10.x86_64.rpm pam_ssh_agent_auth-0:0.10.3-7.30.el8_10.x86_64.rpm pam_ssh_agent_auth-debuginfo-0:0.10.3-7.30.el8_10.x86_64.rpm

Rocky Linux 8 aarch64 - AppStream

openssh-askpass-0:8.0p1-30.el8_10.aarch64.rpm openssh-askpass-debuginfo-0:8.0p1-30.el8_10.aarch64.rpm

Rocky Linux 8 x86_64 - AppStream

openssh-askpass-0:8.0p1-30.el8_10.x86_64.rpm openssh-askpass-debuginfo-0:8.0p1-30.el8_10.x86_64.rpm