Red Hat Product Errata RHEA-2011:0420 - Product Enhancement Advisory
Issued:
2011-04-06
Updated:
2011-04-06

RHEA-2011:0420 - Product Enhancement Advisory

Synopsis

openssh enhancement update

Type/Severity

Product Enhancement Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated openssh packages that add one enhancement are now available for Red Hat
Enterprise Linux 5.

Description

OpenSSH is OpenBSD's SSH (Secure Shell) protocol implementation. These packages
include the core files necessary for both the OpenSSH client and server.

This update adds the following enhancement:

  • By default, OpenSSH uses /dev/urandom to reseed the OpenSSL random number

generator. Prior to this update, this random number generator was reseeded only
once when the sshd service, the ssh client, or an SSH-aware utility was started.
To guarantee sufficient entropy, this update modifies the underlying source code
to reseed the OpenSSL random number generator periodically. Additionally, the
"SSH_ENTROPY_SOURCE" environment variable has been added to allow users to
specify /dev/random as the random number generator. (BZ#690145)

All users of openssh are advised to upgrade to these updated packages, which add
this enhancement.

Solution

Before applying this update, make sure that all previously-released errata
relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

  • Red Hat Enterprise Linux Server 5 x86_64
  • Red Hat Enterprise Linux Server 5 ia64
  • Red Hat Enterprise Linux Server 5 i386
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.6 ia64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.6 i386
  • Red Hat Enterprise Linux Server - AUS 5.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 5.6 ia64
  • Red Hat Enterprise Linux Server - AUS 5.6 i386
  • Red Hat Enterprise Linux Workstation 5 x86_64
  • Red Hat Enterprise Linux Workstation 5 i386
  • Red Hat Enterprise Linux Desktop 5 x86_64
  • Red Hat Enterprise Linux Desktop 5 i386
  • Red Hat Enterprise Linux for IBM z Systems 5 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.6 s390x
  • Red Hat Enterprise Linux for Power, big endian 5 ppc
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.6 ppc
  • Red Hat Enterprise Linux Server from RHUI 5 x86_64
  • Red Hat Enterprise Linux Server from RHUI 5 i386
  • Red Hat Enterprise Linux Server - Extended Update Support from RHUI 5.6 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support from RHUI 5.6 i386

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 5

SRPM
openssh-4.3p2-72.el5_6.3.src.rpm SHA-256: 04680229d02b8cc51293911595569ff1198d6130f7fa7e414b02d07e1ce82c7e
x86_64
openssh-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: a606fd0f46decb9c0e034aea535b4d8c528790e4447e123ee668b576c1327da3
openssh-askpass-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: cc5e564c67f3d5a43d2e2c3a87c9304ad9e9b427f35dc26495318639e8f15fd0
openssh-clients-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: c0594a41271ea5278f746cf8bdf2f358748766e78aef73a3ed249bcad60f3acd
openssh-server-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: d7f93246819f23392c2cd7ea13996faf2e4a9a72b2b4cbf7f9fe564e0ffdb151
ia64
openssh-4.3p2-72.el5_6.3.ia64.rpm SHA-256: 869aab4663ba7d0b82faa1e691ae727e969dad3fcc9131af3ca634cd2c540141
openssh-askpass-4.3p2-72.el5_6.3.ia64.rpm SHA-256: de8aef1eecd87dabe2ca8b65a032f013271adaee2dee416169332fd6b4633212
openssh-clients-4.3p2-72.el5_6.3.ia64.rpm SHA-256: f363a8d552d545f2eb43e824b6589fb89a673c23206be48719ba28decd44b4d5
openssh-server-4.3p2-72.el5_6.3.ia64.rpm SHA-256: e0d4aef9fcf47e75d02b9d31b01b06ffc9eec437ebc1961ce2af3178b2f34c4f
i386
openssh-4.3p2-72.el5_6.3.i386.rpm SHA-256: 836d10525f40eb6b836aae94c000357cb22bb97df0da953e3d25304226e88b1e
openssh-askpass-4.3p2-72.el5_6.3.i386.rpm SHA-256: a4538cf14550544713cbdc8fde7b65d430737987bb5820d93cec91eeddf8a665
openssh-clients-4.3p2-72.el5_6.3.i386.rpm SHA-256: 08f80868ec47c6a79603a1f2c315931704c689d31cc762d1e59d1da20dace141
openssh-server-4.3p2-72.el5_6.3.i386.rpm SHA-256: 5f2ee8e6d5ba4d3828009b37427b735e4703eb9e5e8bfceebdb3e1bdb4f4b93b

Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.6

SRPM
openssh-4.3p2-72.el5_6.3.src.rpm SHA-256: 04680229d02b8cc51293911595569ff1198d6130f7fa7e414b02d07e1ce82c7e
x86_64
openssh-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: a606fd0f46decb9c0e034aea535b4d8c528790e4447e123ee668b576c1327da3
openssh-askpass-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: cc5e564c67f3d5a43d2e2c3a87c9304ad9e9b427f35dc26495318639e8f15fd0
openssh-clients-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: c0594a41271ea5278f746cf8bdf2f358748766e78aef73a3ed249bcad60f3acd
openssh-server-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: d7f93246819f23392c2cd7ea13996faf2e4a9a72b2b4cbf7f9fe564e0ffdb151
ia64
openssh-4.3p2-72.el5_6.3.ia64.rpm SHA-256: 869aab4663ba7d0b82faa1e691ae727e969dad3fcc9131af3ca634cd2c540141
openssh-askpass-4.3p2-72.el5_6.3.ia64.rpm SHA-256: de8aef1eecd87dabe2ca8b65a032f013271adaee2dee416169332fd6b4633212
openssh-clients-4.3p2-72.el5_6.3.ia64.rpm SHA-256: f363a8d552d545f2eb43e824b6589fb89a673c23206be48719ba28decd44b4d5
openssh-server-4.3p2-72.el5_6.3.ia64.rpm SHA-256: e0d4aef9fcf47e75d02b9d31b01b06ffc9eec437ebc1961ce2af3178b2f34c4f
i386
openssh-4.3p2-72.el5_6.3.i386.rpm SHA-256: 836d10525f40eb6b836aae94c000357cb22bb97df0da953e3d25304226e88b1e
openssh-askpass-4.3p2-72.el5_6.3.i386.rpm SHA-256: a4538cf14550544713cbdc8fde7b65d430737987bb5820d93cec91eeddf8a665
openssh-clients-4.3p2-72.el5_6.3.i386.rpm SHA-256: 08f80868ec47c6a79603a1f2c315931704c689d31cc762d1e59d1da20dace141
openssh-server-4.3p2-72.el5_6.3.i386.rpm SHA-256: 5f2ee8e6d5ba4d3828009b37427b735e4703eb9e5e8bfceebdb3e1bdb4f4b93b

Red Hat Enterprise Linux Server - AUS 5.6

SRPM
openssh-4.3p2-72.el5_6.3.src.rpm SHA-256: 04680229d02b8cc51293911595569ff1198d6130f7fa7e414b02d07e1ce82c7e
x86_64
openssh-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: a606fd0f46decb9c0e034aea535b4d8c528790e4447e123ee668b576c1327da3
openssh-askpass-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: cc5e564c67f3d5a43d2e2c3a87c9304ad9e9b427f35dc26495318639e8f15fd0
openssh-clients-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: c0594a41271ea5278f746cf8bdf2f358748766e78aef73a3ed249bcad60f3acd
openssh-server-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: d7f93246819f23392c2cd7ea13996faf2e4a9a72b2b4cbf7f9fe564e0ffdb151
ia64
openssh-4.3p2-72.el5_6.3.ia64.rpm SHA-256: 869aab4663ba7d0b82faa1e691ae727e969dad3fcc9131af3ca634cd2c540141
openssh-askpass-4.3p2-72.el5_6.3.ia64.rpm SHA-256: de8aef1eecd87dabe2ca8b65a032f013271adaee2dee416169332fd6b4633212
openssh-clients-4.3p2-72.el5_6.3.ia64.rpm SHA-256: f363a8d552d545f2eb43e824b6589fb89a673c23206be48719ba28decd44b4d5
openssh-server-4.3p2-72.el5_6.3.ia64.rpm SHA-256: e0d4aef9fcf47e75d02b9d31b01b06ffc9eec437ebc1961ce2af3178b2f34c4f
i386
openssh-4.3p2-72.el5_6.3.i386.rpm SHA-256: 836d10525f40eb6b836aae94c000357cb22bb97df0da953e3d25304226e88b1e
openssh-askpass-4.3p2-72.el5_6.3.i386.rpm SHA-256: a4538cf14550544713cbdc8fde7b65d430737987bb5820d93cec91eeddf8a665
openssh-clients-4.3p2-72.el5_6.3.i386.rpm SHA-256: 08f80868ec47c6a79603a1f2c315931704c689d31cc762d1e59d1da20dace141
openssh-server-4.3p2-72.el5_6.3.i386.rpm SHA-256: 5f2ee8e6d5ba4d3828009b37427b735e4703eb9e5e8bfceebdb3e1bdb4f4b93b

Red Hat Enterprise Linux Workstation 5

SRPM
openssh-4.3p2-72.el5_6.3.src.rpm SHA-256: 04680229d02b8cc51293911595569ff1198d6130f7fa7e414b02d07e1ce82c7e
x86_64
openssh-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: a606fd0f46decb9c0e034aea535b4d8c528790e4447e123ee668b576c1327da3
openssh-askpass-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: cc5e564c67f3d5a43d2e2c3a87c9304ad9e9b427f35dc26495318639e8f15fd0
openssh-clients-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: c0594a41271ea5278f746cf8bdf2f358748766e78aef73a3ed249bcad60f3acd
openssh-server-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: d7f93246819f23392c2cd7ea13996faf2e4a9a72b2b4cbf7f9fe564e0ffdb151
i386
openssh-4.3p2-72.el5_6.3.i386.rpm SHA-256: 836d10525f40eb6b836aae94c000357cb22bb97df0da953e3d25304226e88b1e
openssh-askpass-4.3p2-72.el5_6.3.i386.rpm SHA-256: a4538cf14550544713cbdc8fde7b65d430737987bb5820d93cec91eeddf8a665
openssh-clients-4.3p2-72.el5_6.3.i386.rpm SHA-256: 08f80868ec47c6a79603a1f2c315931704c689d31cc762d1e59d1da20dace141
openssh-server-4.3p2-72.el5_6.3.i386.rpm SHA-256: 5f2ee8e6d5ba4d3828009b37427b735e4703eb9e5e8bfceebdb3e1bdb4f4b93b

Red Hat Enterprise Linux Desktop 5

SRPM
openssh-4.3p2-72.el5_6.3.src.rpm SHA-256: 04680229d02b8cc51293911595569ff1198d6130f7fa7e414b02d07e1ce82c7e
x86_64
openssh-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: a606fd0f46decb9c0e034aea535b4d8c528790e4447e123ee668b576c1327da3
openssh-askpass-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: cc5e564c67f3d5a43d2e2c3a87c9304ad9e9b427f35dc26495318639e8f15fd0
openssh-clients-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: c0594a41271ea5278f746cf8bdf2f358748766e78aef73a3ed249bcad60f3acd
openssh-server-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: d7f93246819f23392c2cd7ea13996faf2e4a9a72b2b4cbf7f9fe564e0ffdb151
i386
openssh-4.3p2-72.el5_6.3.i386.rpm SHA-256: 836d10525f40eb6b836aae94c000357cb22bb97df0da953e3d25304226e88b1e
openssh-askpass-4.3p2-72.el5_6.3.i386.rpm SHA-256: a4538cf14550544713cbdc8fde7b65d430737987bb5820d93cec91eeddf8a665
openssh-clients-4.3p2-72.el5_6.3.i386.rpm SHA-256: 08f80868ec47c6a79603a1f2c315931704c689d31cc762d1e59d1da20dace141
openssh-server-4.3p2-72.el5_6.3.i386.rpm SHA-256: 5f2ee8e6d5ba4d3828009b37427b735e4703eb9e5e8bfceebdb3e1bdb4f4b93b

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
openssh-4.3p2-72.el5_6.3.src.rpm SHA-256: 04680229d02b8cc51293911595569ff1198d6130f7fa7e414b02d07e1ce82c7e
s390x
openssh-4.3p2-72.el5_6.3.s390x.rpm SHA-256: 054c8f9d6c9c2ddff74b89bd31f19a6279ff983bac992d41398115e2eb4da11d
openssh-askpass-4.3p2-72.el5_6.3.s390x.rpm SHA-256: ef48c17252e9e7209e24194f4af836176c850ea6c87f51c852555683fbfd2c38
openssh-clients-4.3p2-72.el5_6.3.s390x.rpm SHA-256: 48ef234674809d38f0a097a41465964c5a1e3cbdcb5c14313612115608d71157
openssh-server-4.3p2-72.el5_6.3.s390x.rpm SHA-256: d72cdbf8a2078f1baed59e483f96c85d6255aa61d7c319d2250f0cf2a199a49c

Red Hat Enterprise Linux for Power, big endian 5

SRPM
openssh-4.3p2-72.el5_6.3.src.rpm SHA-256: 04680229d02b8cc51293911595569ff1198d6130f7fa7e414b02d07e1ce82c7e
ppc
openssh-4.3p2-72.el5_6.3.ppc.rpm SHA-256: de45cfa6ab80c45c9ec3f3d95c5004799762557aaeeb1b392f45f6a8cd740308
openssh-askpass-4.3p2-72.el5_6.3.ppc.rpm SHA-256: ceea5b93207e29b84b4998a7525754020bf4febacfdf01d8e40536e303e07b29
openssh-clients-4.3p2-72.el5_6.3.ppc.rpm SHA-256: ef11e7834b5228a7e974412ae4890bd8b33558e132c25c2c8b483c718cadf783
openssh-server-4.3p2-72.el5_6.3.ppc.rpm SHA-256: 17dd3613013a1089516ebdf4a5d12ddaf8249ef7a5b5a3d7eb8aed99449307fb

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.6

SRPM
openssh-4.3p2-72.el5_6.3.src.rpm SHA-256: 04680229d02b8cc51293911595569ff1198d6130f7fa7e414b02d07e1ce82c7e
ppc
openssh-4.3p2-72.el5_6.3.ppc.rpm SHA-256: de45cfa6ab80c45c9ec3f3d95c5004799762557aaeeb1b392f45f6a8cd740308
openssh-askpass-4.3p2-72.el5_6.3.ppc.rpm SHA-256: ceea5b93207e29b84b4998a7525754020bf4febacfdf01d8e40536e303e07b29
openssh-clients-4.3p2-72.el5_6.3.ppc.rpm SHA-256: ef11e7834b5228a7e974412ae4890bd8b33558e132c25c2c8b483c718cadf783
openssh-server-4.3p2-72.el5_6.3.ppc.rpm SHA-256: 17dd3613013a1089516ebdf4a5d12ddaf8249ef7a5b5a3d7eb8aed99449307fb

Red Hat Enterprise Linux Server from RHUI 5

SRPM
openssh-4.3p2-72.el5_6.3.src.rpm SHA-256: 04680229d02b8cc51293911595569ff1198d6130f7fa7e414b02d07e1ce82c7e
x86_64
openssh-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: a606fd0f46decb9c0e034aea535b4d8c528790e4447e123ee668b576c1327da3
openssh-askpass-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: cc5e564c67f3d5a43d2e2c3a87c9304ad9e9b427f35dc26495318639e8f15fd0
openssh-clients-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: c0594a41271ea5278f746cf8bdf2f358748766e78aef73a3ed249bcad60f3acd
openssh-server-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: d7f93246819f23392c2cd7ea13996faf2e4a9a72b2b4cbf7f9fe564e0ffdb151
i386
openssh-4.3p2-72.el5_6.3.i386.rpm SHA-256: 836d10525f40eb6b836aae94c000357cb22bb97df0da953e3d25304226e88b1e
openssh-askpass-4.3p2-72.el5_6.3.i386.rpm SHA-256: a4538cf14550544713cbdc8fde7b65d430737987bb5820d93cec91eeddf8a665
openssh-clients-4.3p2-72.el5_6.3.i386.rpm SHA-256: 08f80868ec47c6a79603a1f2c315931704c689d31cc762d1e59d1da20dace141
openssh-server-4.3p2-72.el5_6.3.i386.rpm SHA-256: 5f2ee8e6d5ba4d3828009b37427b735e4703eb9e5e8bfceebdb3e1bdb4f4b93b

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.6

SRPM
openssh-4.3p2-72.el5_6.3.src.rpm SHA-256: 04680229d02b8cc51293911595569ff1198d6130f7fa7e414b02d07e1ce82c7e
s390x
openssh-4.3p2-72.el5_6.3.s390x.rpm SHA-256: 054c8f9d6c9c2ddff74b89bd31f19a6279ff983bac992d41398115e2eb4da11d
openssh-askpass-4.3p2-72.el5_6.3.s390x.rpm SHA-256: ef48c17252e9e7209e24194f4af836176c850ea6c87f51c852555683fbfd2c38
openssh-clients-4.3p2-72.el5_6.3.s390x.rpm SHA-256: 48ef234674809d38f0a097a41465964c5a1e3cbdcb5c14313612115608d71157
openssh-server-4.3p2-72.el5_6.3.s390x.rpm SHA-256: d72cdbf8a2078f1baed59e483f96c85d6255aa61d7c319d2250f0cf2a199a49c

Red Hat Enterprise Linux Server - Extended Update Support from RHUI 5.6

SRPM
openssh-4.3p2-72.el5_6.3.src.rpm SHA-256: 04680229d02b8cc51293911595569ff1198d6130f7fa7e414b02d07e1ce82c7e
x86_64
openssh-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: a606fd0f46decb9c0e034aea535b4d8c528790e4447e123ee668b576c1327da3
openssh-askpass-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: cc5e564c67f3d5a43d2e2c3a87c9304ad9e9b427f35dc26495318639e8f15fd0
openssh-clients-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: c0594a41271ea5278f746cf8bdf2f358748766e78aef73a3ed249bcad60f3acd
openssh-server-4.3p2-72.el5_6.3.x86_64.rpm SHA-256: d7f93246819f23392c2cd7ea13996faf2e4a9a72b2b4cbf7f9fe564e0ffdb151
i386
openssh-4.3p2-72.el5_6.3.i386.rpm SHA-256: 836d10525f40eb6b836aae94c000357cb22bb97df0da953e3d25304226e88b1e
openssh-askpass-4.3p2-72.el5_6.3.i386.rpm SHA-256: a4538cf14550544713cbdc8fde7b65d430737987bb5820d93cec91eeddf8a665
openssh-clients-4.3p2-72.el5_6.3.i386.rpm SHA-256: 08f80868ec47c6a79603a1f2c315931704c689d31cc762d1e59d1da20dace141
openssh-server-4.3p2-72.el5_6.3.i386.rpm SHA-256: 5f2ee8e6d5ba4d3828009b37427b735e4703eb9e5e8bfceebdb3e1bdb4f4b93b

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.