Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Oracle Linux 7 ELSA-2024-12158 Moderate: OpenSSH Security Patch

oracle
Calendar Grey February 14, 2024
Oracle Linux Logo Esm H88
Oracle Linux Security Advisory ELSA-2024-12158 has been issued to resolve vulnerabilities in openssh for the aarch64 architecture, alongside the release of the patched packages.
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

Summary

[7.4p1-23.0.3] - add KEX_INITIAL flag [Orabug: 36160445] - implement "strict key exchange" [CVE-2023-48795][Orabug: 36160445]

SRPMs

https://oss.oracle.com:443/ol7/SRPMS-updates//openssh-7.4p1-23.0.3.el7_9.src.rpm

x86_64

aarch64

openssh-7.4p1-23.0.3.el7_9.aarch64.rpm openssh-askpass-7.4p1-23.0.3.el7_9.aarch64.rpm openssh-clients-7.4p1-23.0.3.el7_9.aarch64.rpm openssh-keycat-7.4p1-23.0.3.el7_9.aarch64.rpm openssh-server-7.4p1-23.0.3.el7_9.aarch64.rpm openssh-cavs-7.4p1-23.0.3.el7_9.aarch64.rpm openssh-ldap-7.4p1-23.0.3.el7_9.aarch64.rpm openssh-server-sysvinit-7.4p1-23.0.3.el7_9.aarch64.rpm pam_ssh_agent_auth-0.10.3-2.23.0.3.el7_9.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2023-48795

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here