RHBA-2008:0709 - Bug Fix Advisory

Topic

Updated openssh packages that resolve several issues are now available.

Description

OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation. These
packages include the core files necessary for both the OpenSSH client and
server.

These updated openssh packages provide fixes for the following bugs:

• the ssh server would abort authentication of the client when the user's

authorized_keys file was corrupted. This fixed package now allows
authentication to proceed using other enabled methods.

• the scp (secure copy) manual page was improved to describe the behavior

when copying files to a destination.

All users of openssh are advised to upgrade to these updated packages,
which resolve these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 426596 - Slight addition to the "scp" man page
• BZ - 432642 - When authorized_keys is incorrect, sshd avoids other authentication methods, including password.

CVEs

(none)

References

(none)