Synopsis

Low: openssh security, bug fix, and enhancement update

Type/Severity

Security Advisory: Low

Topic

An update for openssh is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

• openssh: User enumeration via malformed packets in authentication requests (CVE-2018-15473)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, the OpenSSH server daemon (sshd) will be restarted automatically.

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le

Fixes

• BZ - 1583735 - Permission denied reading authorized_keys when setting AuthorizedKeysCommand
• BZ - 1619063 - CVE-2018-15473 openssh: User enumeration via malformed packets in authentication requests
• BZ - 1712053 - tmux session not attached automatically during manual installation on s390x
• BZ - 1722446 - openssh FIPS cipher list has an extra comma in it

CVEs

• CVE-2018-15473

References

• https://access.redhat.com/security/updates/classification/#low
• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index

Red Hat Enterprise Linux Server 7

SRPM
openssh-7.4p1-21.el7.src.rpm	SHA-256: 4a8516862279b86c61c2a41530d0d36d4781ecdc17c0ec34d0b9b35a6bca1374
x86_64
openssh-7.4p1-21.el7.x86_64.rpm	SHA-256: 290ccc1f3e22a77ce692e451a70d7483a358b38358f908b622e85ce93b9d12db
openssh-askpass-7.4p1-21.el7.x86_64.rpm	SHA-256: 54517902309d6eced50959da0f58555367b3b4fb6adc8ce105afbd3351c92c46
openssh-cavs-7.4p1-21.el7.x86_64.rpm	SHA-256: ff38bf38246213ae01a2be078e21b19bc5873db084da7e0f32a0561cdd2cc0be
openssh-clients-7.4p1-21.el7.x86_64.rpm	SHA-256: 364fdd8fbeafbc36f07ba45d00a5f556a39f0386ee075ef00b9203dc496baf81
openssh-debuginfo-7.4p1-21.el7.i686.rpm	SHA-256: 952b4b363608c0528ebbf6f1e568d77de33689ed420a7dd70421f78c1e2bb5d1
openssh-debuginfo-7.4p1-21.el7.x86_64.rpm	SHA-256: fa85dcb3339cb821a8b92ed48d38dd6b623fd965187030bd6c7b5e4dd32f0649
openssh-debuginfo-7.4p1-21.el7.x86_64.rpm	SHA-256: fa85dcb3339cb821a8b92ed48d38dd6b623fd965187030bd6c7b5e4dd32f0649
openssh-keycat-7.4p1-21.el7.x86_64.rpm	SHA-256: 69484b156f81d5aa9256f6fe151c6ee0553e7e697c6979b4774516eb9f9d3abd
openssh-ldap-7.4p1-21.el7.x86_64.rpm	SHA-256: 620543a3426608af9f48fe759640a6da3b37e31f661f182f47085343c610e9b1
openssh-server-7.4p1-21.el7.x86_64.rpm	SHA-256: d4b2de8f877b5c86b4c6751fbfba32d805bff4ecbb6183831888c833fb1af967
openssh-server-sysvinit-7.4p1-21.el7.x86_64.rpm	SHA-256: f7f1113b4a36eb0d97115b3b40e61ca1465752d9106b7d19ac3bff6d9a9b725e
pam_ssh_agent_auth-0.10.3-2.21.el7.i686.rpm	SHA-256: 66dc0de44fb62b11c81bbf214afa81559e3e24fffb60500b64842c364228bf89
pam_ssh_agent_auth-0.10.3-2.21.el7.x86_64.rpm	SHA-256: b4226425a2125d74be20093edaaa6d5695fb7002ac7cef9d3276ca50d73a2c48

Red Hat Enterprise Linux Workstation 7

SRPM
openssh-7.4p1-21.el7.src.rpm	SHA-256: 4a8516862279b86c61c2a41530d0d36d4781ecdc17c0ec34d0b9b35a6bca1374
x86_64
openssh-7.4p1-21.el7.x86_64.rpm	SHA-256: 290ccc1f3e22a77ce692e451a70d7483a358b38358f908b622e85ce93b9d12db
openssh-askpass-7.4p1-21.el7.x86_64.rpm	SHA-256: 54517902309d6eced50959da0f58555367b3b4fb6adc8ce105afbd3351c92c46
openssh-cavs-7.4p1-21.el7.x86_64.rpm	SHA-256: ff38bf38246213ae01a2be078e21b19bc5873db084da7e0f32a0561cdd2cc0be
openssh-clients-7.4p1-21.el7.x86_64.rpm	SHA-256: 364fdd8fbeafbc36f07ba45d00a5f556a39f0386ee075ef00b9203dc496baf81
openssh-debuginfo-7.4p1-21.el7.i686.rpm	SHA-256: 952b4b363608c0528ebbf6f1e568d77de33689ed420a7dd70421f78c1e2bb5d1
openssh-debuginfo-7.4p1-21.el7.x86_64.rpm	SHA-256: fa85dcb3339cb821a8b92ed48d38dd6b623fd965187030bd6c7b5e4dd32f0649
openssh-debuginfo-7.4p1-21.el7.x86_64.rpm	SHA-256: fa85dcb3339cb821a8b92ed48d38dd6b623fd965187030bd6c7b5e4dd32f0649
openssh-keycat-7.4p1-21.el7.x86_64.rpm	SHA-256: 69484b156f81d5aa9256f6fe151c6ee0553e7e697c6979b4774516eb9f9d3abd
openssh-ldap-7.4p1-21.el7.x86_64.rpm	SHA-256: 620543a3426608af9f48fe759640a6da3b37e31f661f182f47085343c610e9b1
openssh-server-7.4p1-21.el7.x86_64.rpm	SHA-256: d4b2de8f877b5c86b4c6751fbfba32d805bff4ecbb6183831888c833fb1af967
openssh-server-sysvinit-7.4p1-21.el7.x86_64.rpm	SHA-256: f7f1113b4a36eb0d97115b3b40e61ca1465752d9106b7d19ac3bff6d9a9b725e
pam_ssh_agent_auth-0.10.3-2.21.el7.i686.rpm	SHA-256: 66dc0de44fb62b11c81bbf214afa81559e3e24fffb60500b64842c364228bf89
pam_ssh_agent_auth-0.10.3-2.21.el7.x86_64.rpm	SHA-256: b4226425a2125d74be20093edaaa6d5695fb7002ac7cef9d3276ca50d73a2c48

Red Hat Enterprise Linux Desktop 7

SRPM
openssh-7.4p1-21.el7.src.rpm	SHA-256: 4a8516862279b86c61c2a41530d0d36d4781ecdc17c0ec34d0b9b35a6bca1374
x86_64
openssh-7.4p1-21.el7.x86_64.rpm	SHA-256: 290ccc1f3e22a77ce692e451a70d7483a358b38358f908b622e85ce93b9d12db
openssh-askpass-7.4p1-21.el7.x86_64.rpm	SHA-256: 54517902309d6eced50959da0f58555367b3b4fb6adc8ce105afbd3351c92c46
openssh-cavs-7.4p1-21.el7.x86_64.rpm	SHA-256: ff38bf38246213ae01a2be078e21b19bc5873db084da7e0f32a0561cdd2cc0be
openssh-clients-7.4p1-21.el7.x86_64.rpm	SHA-256: 364fdd8fbeafbc36f07ba45d00a5f556a39f0386ee075ef00b9203dc496baf81
openssh-debuginfo-7.4p1-21.el7.i686.rpm	SHA-256: 952b4b363608c0528ebbf6f1e568d77de33689ed420a7dd70421f78c1e2bb5d1
openssh-debuginfo-7.4p1-21.el7.x86_64.rpm	SHA-256: fa85dcb3339cb821a8b92ed48d38dd6b623fd965187030bd6c7b5e4dd32f0649
openssh-debuginfo-7.4p1-21.el7.x86_64.rpm	SHA-256: fa85dcb3339cb821a8b92ed48d38dd6b623fd965187030bd6c7b5e4dd32f0649
openssh-keycat-7.4p1-21.el7.x86_64.rpm	SHA-256: 69484b156f81d5aa9256f6fe151c6ee0553e7e697c6979b4774516eb9f9d3abd
openssh-ldap-7.4p1-21.el7.x86_64.rpm	SHA-256: 620543a3426608af9f48fe759640a6da3b37e31f661f182f47085343c610e9b1
openssh-server-7.4p1-21.el7.x86_64.rpm	SHA-256: d4b2de8f877b5c86b4c6751fbfba32d805bff4ecbb6183831888c833fb1af967
openssh-server-sysvinit-7.4p1-21.el7.x86_64.rpm	SHA-256: f7f1113b4a36eb0d97115b3b40e61ca1465752d9106b7d19ac3bff6d9a9b725e
pam_ssh_agent_auth-0.10.3-2.21.el7.i686.rpm	SHA-256: 66dc0de44fb62b11c81bbf214afa81559e3e24fffb60500b64842c364228bf89
pam_ssh_agent_auth-0.10.3-2.21.el7.x86_64.rpm	SHA-256: b4226425a2125d74be20093edaaa6d5695fb7002ac7cef9d3276ca50d73a2c48

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
openssh-7.4p1-21.el7.src.rpm	SHA-256: 4a8516862279b86c61c2a41530d0d36d4781ecdc17c0ec34d0b9b35a6bca1374
s390x
openssh-7.4p1-21.el7.s390x.rpm	SHA-256: 96c895021292def6fe95f0c4625400c1669956cb62280ff2f9d14891498c580a
openssh-askpass-7.4p1-21.el7.s390x.rpm	SHA-256: a812bf8cc2cdbf1c18b808fec88586f35988b5b30c41948c58c7b335a7f12e14
openssh-cavs-7.4p1-21.el7.s390x.rpm	SHA-256: c728c3ee03c4b1fbfe16614e44b64ba00bbcf4d3d4e00924d76037c179498675
openssh-clients-7.4p1-21.el7.s390x.rpm	SHA-256: ea0d11a406c3ab5f3c09a6eb517c7e226f4aa017c5b492b4cc1c8a301a1d5bad
openssh-debuginfo-7.4p1-21.el7.s390.rpm	SHA-256: 30d43bb828a23ed2711ab88521ddf7dde2c6567e81a9f095c23ee28c75b8200d
openssh-debuginfo-7.4p1-21.el7.s390x.rpm	SHA-256: 4543440d12b8734e7885dc30440dd0e90cb4c62c4a58b635fc69b68db555a592
openssh-debuginfo-7.4p1-21.el7.s390x.rpm	SHA-256: 4543440d12b8734e7885dc30440dd0e90cb4c62c4a58b635fc69b68db555a592
openssh-keycat-7.4p1-21.el7.s390x.rpm	SHA-256: bf695c5a4ce900e26060e45c70069012ce0c2ec13881b493e181df659c8b7499
openssh-ldap-7.4p1-21.el7.s390x.rpm	SHA-256: 34016b892a07852d3c54072e7926b869576d11d3682c415cc1744392b0f979b8
openssh-server-7.4p1-21.el7.s390x.rpm	SHA-256: 5f29aa987aa647b17554fe9d98072ac8e4e012aa51a2a45229b748cec0aeef8c
openssh-server-sysvinit-7.4p1-21.el7.s390x.rpm	SHA-256: d8bf4c38331bf6e2eb0ea912a3a584e74f9e0a9573cf5e0a54102e30afcf8f9c
pam_ssh_agent_auth-0.10.3-2.21.el7.s390.rpm	SHA-256: 0412385f320e5a22b1e9c927113caeaf54bb28ec4ba6f49df1a25d885311e186
pam_ssh_agent_auth-0.10.3-2.21.el7.s390x.rpm	SHA-256: 2a9a3964ee810f5c757ac23ba881283bf39f50ffdff479eb9aea10e371056cc8

Red Hat Enterprise Linux for Power, big endian 7

SRPM
openssh-7.4p1-21.el7.src.rpm	SHA-256: 4a8516862279b86c61c2a41530d0d36d4781ecdc17c0ec34d0b9b35a6bca1374
ppc64
openssh-7.4p1-21.el7.ppc64.rpm	SHA-256: 8a6dafcc19411b81858bf78faf946c44dcc028398fa4213e39fde145ccd1c380
openssh-askpass-7.4p1-21.el7.ppc64.rpm	SHA-256: ef0340aa44ede8fa0d3c224f3302d88f64c6fb9c0cc4d12ce2863e6c36ffa5a7
openssh-cavs-7.4p1-21.el7.ppc64.rpm	SHA-256: 02a91edf605c81d78d8504dfa6611545123fbb96893d569c15a9b01521650af9
openssh-clients-7.4p1-21.el7.ppc64.rpm	SHA-256: d2b12f58992ed3acf337ba5d33534c6e1f8db1c8af63b787c212e79fd0665837
openssh-debuginfo-7.4p1-21.el7.ppc.rpm	SHA-256: 966fd1355dbd014b39df05111d4440de4c00c4579f8bad0f8de06ab9b00670b6
openssh-debuginfo-7.4p1-21.el7.ppc64.rpm	SHA-256: 170290a6b4a6e4aa86694fdd68f99dcf9f8aebf1a6e06dbc199dfce0dcd3495c
openssh-debuginfo-7.4p1-21.el7.ppc64.rpm	SHA-256: 170290a6b4a6e4aa86694fdd68f99dcf9f8aebf1a6e06dbc199dfce0dcd3495c
openssh-keycat-7.4p1-21.el7.ppc64.rpm	SHA-256: 6545beb6280c7ae64043c88f209c6a5c63166378daa862ad8258d762467cf1fb
openssh-ldap-7.4p1-21.el7.ppc64.rpm	SHA-256: 311b091443da4c908a091ff80a9aa822a3f525cd08d584dab517fa29a318304a
openssh-server-7.4p1-21.el7.ppc64.rpm	SHA-256: 0babe496f55eeffa13a106a5d35130f06870e8929e83744788896927761ea8ea
openssh-server-sysvinit-7.4p1-21.el7.ppc64.rpm	SHA-256: 1095b66570f3d1e978540805fba2861d1fd23c460f781a9cb01bcd3dbcd8e0d3
pam_ssh_agent_auth-0.10.3-2.21.el7.ppc.rpm	SHA-256: 62bc2e5fe8811d079aa717f51c504e44d4e7564701174b5ae69220b8f2e3c7e7
pam_ssh_agent_auth-0.10.3-2.21.el7.ppc64.rpm	SHA-256: 4fd02a23a2c070abc66710d14febac1895e52c93c964f87ab5877fcc2456960c

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
openssh-7.4p1-21.el7.src.rpm	SHA-256: 4a8516862279b86c61c2a41530d0d36d4781ecdc17c0ec34d0b9b35a6bca1374
x86_64
openssh-7.4p1-21.el7.x86_64.rpm	SHA-256: 290ccc1f3e22a77ce692e451a70d7483a358b38358f908b622e85ce93b9d12db
openssh-askpass-7.4p1-21.el7.x86_64.rpm	SHA-256: 54517902309d6eced50959da0f58555367b3b4fb6adc8ce105afbd3351c92c46
openssh-cavs-7.4p1-21.el7.x86_64.rpm	SHA-256: ff38bf38246213ae01a2be078e21b19bc5873db084da7e0f32a0561cdd2cc0be
openssh-clients-7.4p1-21.el7.x86_64.rpm	SHA-256: 364fdd8fbeafbc36f07ba45d00a5f556a39f0386ee075ef00b9203dc496baf81
openssh-debuginfo-7.4p1-21.el7.i686.rpm	SHA-256: 952b4b363608c0528ebbf6f1e568d77de33689ed420a7dd70421f78c1e2bb5d1
openssh-debuginfo-7.4p1-21.el7.x86_64.rpm	SHA-256: fa85dcb3339cb821a8b92ed48d38dd6b623fd965187030bd6c7b5e4dd32f0649
openssh-debuginfo-7.4p1-21.el7.x86_64.rpm	SHA-256: fa85dcb3339cb821a8b92ed48d38dd6b623fd965187030bd6c7b5e4dd32f0649
openssh-keycat-7.4p1-21.el7.x86_64.rpm	SHA-256: 69484b156f81d5aa9256f6fe151c6ee0553e7e697c6979b4774516eb9f9d3abd
openssh-ldap-7.4p1-21.el7.x86_64.rpm	SHA-256: 620543a3426608af9f48fe759640a6da3b37e31f661f182f47085343c610e9b1
openssh-server-7.4p1-21.el7.x86_64.rpm	SHA-256: d4b2de8f877b5c86b4c6751fbfba32d805bff4ecbb6183831888c833fb1af967
openssh-server-sysvinit-7.4p1-21.el7.x86_64.rpm	SHA-256: f7f1113b4a36eb0d97115b3b40e61ca1465752d9106b7d19ac3bff6d9a9b725e
pam_ssh_agent_auth-0.10.3-2.21.el7.i686.rpm	SHA-256: 66dc0de44fb62b11c81bbf214afa81559e3e24fffb60500b64842c364228bf89
pam_ssh_agent_auth-0.10.3-2.21.el7.x86_64.rpm	SHA-256: b4226425a2125d74be20093edaaa6d5695fb7002ac7cef9d3276ca50d73a2c48

Red Hat Enterprise Linux for Power, little endian 7

SRPM
openssh-7.4p1-21.el7.src.rpm	SHA-256: 4a8516862279b86c61c2a41530d0d36d4781ecdc17c0ec34d0b9b35a6bca1374
ppc64le
openssh-7.4p1-21.el7.ppc64le.rpm	SHA-256: 6184c182163292b96aa516906de6e8da604591a7c56989fb211df315937e4475
openssh-askpass-7.4p1-21.el7.ppc64le.rpm	SHA-256: a538d79941fa76fca6d5687e84d8d31deac0e0b3cfa6df371ddeb05e1c58656c
openssh-cavs-7.4p1-21.el7.ppc64le.rpm	SHA-256: d73335618cf519cfdc3e04233058190d85d6b8b112274472e0243b0a114ac16a
openssh-clients-7.4p1-21.el7.ppc64le.rpm	SHA-256: 3904a7efe14d8d4d38631e0225d481809ec4186aa497a026800c02d32aba527b
openssh-debuginfo-7.4p1-21.el7.ppc64le.rpm	SHA-256: 21959d7f9d278c2a66ae2ae67427f3f0df0a4d76662cca08036c950aad7dfa66
openssh-debuginfo-7.4p1-21.el7.ppc64le.rpm	SHA-256: 21959d7f9d278c2a66ae2ae67427f3f0df0a4d76662cca08036c950aad7dfa66
openssh-keycat-7.4p1-21.el7.ppc64le.rpm	SHA-256: 03ee310d284aaa9ae46503c466f401d3d16eb244bc8f94a454aa02d36920d537
openssh-ldap-7.4p1-21.el7.ppc64le.rpm	SHA-256: 89a87580a39491026c0dff6bfe49a671ec439de6615ced703ddad5f042c2ebef
openssh-server-7.4p1-21.el7.ppc64le.rpm	SHA-256: 493909a0c1ac9d041816a88880bb183797a84c35bb06dde37efd07538f7300d2
openssh-server-sysvinit-7.4p1-21.el7.ppc64le.rpm	SHA-256: 4868dff8dc50881a85a3e25b37bdcdabe5c6cc1eb5b44ef9f1eb85ac4a4f7b24
pam_ssh_agent_auth-0.10.3-2.21.el7.ppc64le.rpm	SHA-256: 12597a4ff3ec0ac8646908a94a644d742543d09090000f156f88f098f27d23dc