Red Hat Product Errata RHBA-2009:1668 - Bug Fix Advisory
Issued:
2009-12-15
Updated:
2009-12-15

RHBA-2009:1668 - Bug Fix Advisory

Synopsis

openssh bug fix update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated openssh packages that fix a bug are now available.

Description

OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation. These
packages include the core files necessary for both the OpenSSH client and
server.

These updated openssh packages fix the following bug:

  • when sshd, the SSH daemon, used multiple SFTP channels simultaneously,

each SFTP cthannel leaked a UNIX socket. This leak could eventually cause
sshd to consume large amounts of system resources. This update fixes the
leak by ensuring that every SFTP channel closes the UNIX socket, with the
result that using SFTP with multiple simultaneous channels does not cause
sshd to monopolize system resources. (BZ#537348)

All users of openssh are advised to upgrade to these updated packages,
which resolve this issue.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

  • Red Hat Enterprise Linux Server 5 x86_64
  • Red Hat Enterprise Linux Server 5 ia64
  • Red Hat Enterprise Linux Server 5 i386
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.4 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.4 ia64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.4 i386
  • Red Hat Enterprise Linux Workstation 5 x86_64
  • Red Hat Enterprise Linux Workstation 5 i386
  • Red Hat Enterprise Linux Desktop 5 x86_64
  • Red Hat Enterprise Linux Desktop 5 i386
  • Red Hat Enterprise Linux for IBM z Systems 5 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.4 s390x
  • Red Hat Enterprise Linux for Power, big endian 5 ppc
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.4 ppc
  • Red Hat Enterprise Linux Server from RHUI 5 x86_64
  • Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

  • BZ - 537348 - sshd leaks a unix socket after each use of a sftp channel

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 5

SRPM
openssh-4.3p2-36.el5_4.3.src.rpm SHA-256: fd63173234dcc970fd0202da8087817b0a0b91ba96cacf325d07edfe78d9c717
x86_64
openssh-4.3p2-36.el5_4.3.x86_64.rpm SHA-256: 0ecc814aa9a9f9735628ae36e2d4300b1019e6e7f6a237f239c9cf90b34c97e4
openssh-askpass-4.3p2-36.el5_4.3.x86_64.rpm SHA-256: 7f825271b0e215c549ce2261aa30db9f9ff268d51d277f8a3f410a09b983a340
openssh-clients-4.3p2-36.el5_4.3.x86_64.rpm SHA-256: 689b5d1a228ff74ac4d6ff863ef220ea1df253dcd47eb7f0069aaf1388eace05
openssh-server-4.3p2-36.el5_4.3.x86_64.rpm SHA-256: 2978917ab23f5b0ebd20655cd79fc49ece97a7c5251e0b1d068899bfcf8fb98e
ia64
openssh-4.3p2-36.el5_4.3.ia64.rpm SHA-256: 8a92fc04a5e1578c3751a434106c90675a254c556c1ed4a6b79367b5d41b6c2f
openssh-askpass-4.3p2-36.el5_4.3.ia64.rpm SHA-256: f9c88fb5cd7040c2505d2d3f1ac57ec0d07f49fe8af6f660d20073086ef02e27
openssh-clients-4.3p2-36.el5_4.3.ia64.rpm SHA-256: 6467ff9c062b68b33b58e1145617e167f1cbccac997601c9e073e67ee9045ce1
openssh-server-4.3p2-36.el5_4.3.ia64.rpm SHA-256: 3b5358613a1029e5f77c2295f3e69541500f05896ebb477c9c182217c5c2557e
i386
openssh-4.3p2-36.el5_4.3.i386.rpm SHA-256: d1c187502be80d827921a17c61395d90e8bfe56791661e87ffa267c6a1cff7fb
openssh-askpass-4.3p2-36.el5_4.3.i386.rpm SHA-256: dab37878e3de801b59b8844328a11ae94190726eff93b322d3238c5e5eb7910e
openssh-clients-4.3p2-36.el5_4.3.i386.rpm SHA-256: 033d484cc0edcbd128353ec9719976ba2ab76fe5fbf96218059b7641b4c16e08
openssh-server-4.3p2-36.el5_4.3.i386.rpm SHA-256: b88dad106f95c5cd880de9e5b63aebd51639b7549e36527208c50be8b6668a9b

Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.4

SRPM
x86_64
ia64
i386

Red Hat Enterprise Linux Workstation 5

SRPM
openssh-4.3p2-36.el5_4.3.src.rpm SHA-256: fd63173234dcc970fd0202da8087817b0a0b91ba96cacf325d07edfe78d9c717
x86_64
openssh-4.3p2-36.el5_4.3.x86_64.rpm SHA-256: 0ecc814aa9a9f9735628ae36e2d4300b1019e6e7f6a237f239c9cf90b34c97e4
openssh-askpass-4.3p2-36.el5_4.3.x86_64.rpm SHA-256: 7f825271b0e215c549ce2261aa30db9f9ff268d51d277f8a3f410a09b983a340
openssh-clients-4.3p2-36.el5_4.3.x86_64.rpm SHA-256: 689b5d1a228ff74ac4d6ff863ef220ea1df253dcd47eb7f0069aaf1388eace05
openssh-server-4.3p2-36.el5_4.3.x86_64.rpm SHA-256: 2978917ab23f5b0ebd20655cd79fc49ece97a7c5251e0b1d068899bfcf8fb98e
i386
openssh-4.3p2-36.el5_4.3.i386.rpm SHA-256: d1c187502be80d827921a17c61395d90e8bfe56791661e87ffa267c6a1cff7fb
openssh-askpass-4.3p2-36.el5_4.3.i386.rpm SHA-256: dab37878e3de801b59b8844328a11ae94190726eff93b322d3238c5e5eb7910e
openssh-clients-4.3p2-36.el5_4.3.i386.rpm SHA-256: 033d484cc0edcbd128353ec9719976ba2ab76fe5fbf96218059b7641b4c16e08
openssh-server-4.3p2-36.el5_4.3.i386.rpm SHA-256: b88dad106f95c5cd880de9e5b63aebd51639b7549e36527208c50be8b6668a9b

Red Hat Enterprise Linux Desktop 5

SRPM
openssh-4.3p2-36.el5_4.3.src.rpm SHA-256: fd63173234dcc970fd0202da8087817b0a0b91ba96cacf325d07edfe78d9c717
x86_64
openssh-4.3p2-36.el5_4.3.x86_64.rpm SHA-256: 0ecc814aa9a9f9735628ae36e2d4300b1019e6e7f6a237f239c9cf90b34c97e4
openssh-askpass-4.3p2-36.el5_4.3.x86_64.rpm SHA-256: 7f825271b0e215c549ce2261aa30db9f9ff268d51d277f8a3f410a09b983a340
openssh-clients-4.3p2-36.el5_4.3.x86_64.rpm SHA-256: 689b5d1a228ff74ac4d6ff863ef220ea1df253dcd47eb7f0069aaf1388eace05
openssh-server-4.3p2-36.el5_4.3.x86_64.rpm SHA-256: 2978917ab23f5b0ebd20655cd79fc49ece97a7c5251e0b1d068899bfcf8fb98e
i386
openssh-4.3p2-36.el5_4.3.i386.rpm SHA-256: d1c187502be80d827921a17c61395d90e8bfe56791661e87ffa267c6a1cff7fb
openssh-askpass-4.3p2-36.el5_4.3.i386.rpm SHA-256: dab37878e3de801b59b8844328a11ae94190726eff93b322d3238c5e5eb7910e
openssh-clients-4.3p2-36.el5_4.3.i386.rpm SHA-256: 033d484cc0edcbd128353ec9719976ba2ab76fe5fbf96218059b7641b4c16e08
openssh-server-4.3p2-36.el5_4.3.i386.rpm SHA-256: b88dad106f95c5cd880de9e5b63aebd51639b7549e36527208c50be8b6668a9b

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
openssh-4.3p2-36.el5_4.3.src.rpm SHA-256: fd63173234dcc970fd0202da8087817b0a0b91ba96cacf325d07edfe78d9c717
s390x
openssh-4.3p2-36.el5_4.3.s390x.rpm SHA-256: 4325ee7ca52b8b15ecd7f2c21a4cb697bd46dc67a2c768646af762902d6c59fb
openssh-askpass-4.3p2-36.el5_4.3.s390x.rpm SHA-256: d6bd29637ef95119013c95a5af5efaed66445da39a3c1ebca276416e0cbe798e
openssh-clients-4.3p2-36.el5_4.3.s390x.rpm SHA-256: c1dc7caeeac20562d6c32e0bff87411729d1f805c50905a033365f226cbe69bc
openssh-server-4.3p2-36.el5_4.3.s390x.rpm SHA-256: ba148e859f50c09b187990893d44b65e644b8a4b4a54022e38d4d3ad00d7be50

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.4

SRPM
s390x

Red Hat Enterprise Linux for Power, big endian 5

SRPM
openssh-4.3p2-36.el5_4.3.src.rpm SHA-256: fd63173234dcc970fd0202da8087817b0a0b91ba96cacf325d07edfe78d9c717
ppc
openssh-4.3p2-36.el5_4.3.ppc.rpm SHA-256: 5681f007dbf5c490114773f6e68477e7f9b67e52857fa9a77053ae8bf08acde9
openssh-askpass-4.3p2-36.el5_4.3.ppc.rpm SHA-256: d69e3a1faac70bfe15ad1c19690d190e893fec19662a1a3bbf208700d7ee7b22
openssh-clients-4.3p2-36.el5_4.3.ppc.rpm SHA-256: a7efed7f57b1bdd17509433b24a42e290b05771d83294354655b913f87003bdf
openssh-server-4.3p2-36.el5_4.3.ppc.rpm SHA-256: c7dec1d9751ccac2ab67efd2dd6034704e8588da89b3d3391c46923c23cf3b78

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.4

SRPM
ppc

Red Hat Enterprise Linux Server from RHUI 5

SRPM
openssh-4.3p2-36.el5_4.3.src.rpm SHA-256: fd63173234dcc970fd0202da8087817b0a0b91ba96cacf325d07edfe78d9c717
x86_64
openssh-4.3p2-36.el5_4.3.x86_64.rpm SHA-256: 0ecc814aa9a9f9735628ae36e2d4300b1019e6e7f6a237f239c9cf90b34c97e4
openssh-askpass-4.3p2-36.el5_4.3.x86_64.rpm SHA-256: 7f825271b0e215c549ce2261aa30db9f9ff268d51d277f8a3f410a09b983a340
openssh-clients-4.3p2-36.el5_4.3.x86_64.rpm SHA-256: 689b5d1a228ff74ac4d6ff863ef220ea1df253dcd47eb7f0069aaf1388eace05
openssh-server-4.3p2-36.el5_4.3.x86_64.rpm SHA-256: 2978917ab23f5b0ebd20655cd79fc49ece97a7c5251e0b1d068899bfcf8fb98e
i386
openssh-4.3p2-36.el5_4.3.i386.rpm SHA-256: d1c187502be80d827921a17c61395d90e8bfe56791661e87ffa267c6a1cff7fb
openssh-askpass-4.3p2-36.el5_4.3.i386.rpm SHA-256: dab37878e3de801b59b8844328a11ae94190726eff93b322d3238c5e5eb7910e
openssh-clients-4.3p2-36.el5_4.3.i386.rpm SHA-256: 033d484cc0edcbd128353ec9719976ba2ab76fe5fbf96218059b7641b4c16e08
openssh-server-4.3p2-36.el5_4.3.i386.rpm SHA-256: b88dad106f95c5cd880de9e5b63aebd51639b7549e36527208c50be8b6668a9b

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.