This update brings fixes for vulnerabilities published with openssh-7.0 and is fixing pam_ssh_agent_auth module to be functional again.
sudo dnf upgrade --advisory=FEDORA-2015-13520Please login to add feedback.
| submitted | 4 years ago |
| in testing | 4 years ago |
| in stable | 4 years ago |
| 0 | 0 | #1251777 pam_ssh_agent_auth does not work with gnome-keyring-daemon or ssh-agent |
| 0 | 0 | #1252844 CVE-2015-6563 openssh: Privilege separation weakness related to PAM support |
| 0 | 0 | #1252852 CVE-2015-6564 openssh: Use-after-free bug related to PAM support |
| 0 | 0 | #1252853 openssh: Use-after-free bug related to PAM support [fedora-all] |
| 0 | 0 | #1252854 openssh: Privilege separation weakness related to PAM support [fedora-all] |
| 0 | 0 | #1252861 openssh: Incorrectly set TTYs to be world-writable |
| 0 | 0 | #1252862 openssh: Incorrectly set TTYs to be world-writable [fedora-all] |
| 0 | 0 | Test Case OpenSSH |
jjelen
This update has been submitted for testing by jjelen.
Taskotron: depcheck test PASSED on i386. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/116472/steps/runtask/logs/stdio (results are informative only)
Taskotron: depcheck test PASSED on x86_64. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/116472/steps/runtask/logs/stdio (results are informative only)
This update is currently being pushed to the Fedora 22 testing updates repository.
This update has been pushed to testing
Works
Fix for 1251777 tested on FC22 and it does not work. This affects the pam_ssh_agent_auth package.
no regressions noted
No regressions detected
Critical path update approved
no regressions found
This update has reached the stable karma threshold and will be pushed to the stable updates repository
Taskotron: upgradepath test PASSED on noarch. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/117145/steps/runtask/logs/stdio (results are informative only)
This update is currently being pushed to the Fedora 22 stable updates repository.
This update has been pushed to stable