UbuntuUpdates.org

Bugs fixes in "openssh"

Origin Bug number Title Date fixed
Launchpad 2069041 Changing Port in sshd_config requires calling systemctl daemon-reload 2024-10-23
Launchpad 2071815 Investigate ASLR re-randomization being disabled for children 2024-10-23
Launchpad 2076023 Failed to apply 'Match' directive in sshd_config with sshd-socket-generator 2024-10-23
Launchpad 2080216 sshd cannot bind to IPv4 interfaces 2024-10-23
Launchpad 2069041 Changing Port in sshd_config requires calling systemctl daemon-reload 2024-10-23
Launchpad 2071815 Investigate ASLR re-randomization being disabled for children 2024-10-23
Launchpad 2076023 Failed to apply 'Match' directive in sshd_config with sshd-socket-generator 2024-10-23
Launchpad 2080216 sshd cannot bind to IPv4 interfaces 2024-10-23
CVE CVE-2024-39894 OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry (e.g., for su and Sudo) because of an ObscureKeyst 2024-07-09
CVE CVE-2024-39894 OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry (e.g., for su and Sudo) because of an ObscureKeyst 2024-07-09
CVE CVE-2024-39894 OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry (e.g., for su and Sudo) because of an ObscureKeyst 2024-07-09
CVE CVE-2024-39894 OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry (e.g., for su and Sudo) because of an ObscureKeyst 2024-07-09
Launchpad 2053146 openssh 8.9p1 for Jammy auth2-gss patch for gssapi-keyex method is slightly wrong 2024-04-17
Launchpad 2053146 openssh 8.9p1 for Jammy auth2-gss patch for gssapi-keyex method is slightly wrong 2024-04-17
Launchpad 2053146 openssh 8.9p1 for Jammy auth2-gss patch for gssapi-keyex method is slightly wrong 2024-04-05
Launchpad 2053146 openssh 8.9p1 for Jammy auth2-gss patch for gssapi-keyex method is slightly wrong 2024-04-05
CVE CVE-2023-51385 In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by a 2024-01-03
CVE CVE-2021-41617 sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups 2024-01-03
CVE CVE-2023-51385 In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by a 2024-01-03
CVE CVE-2021-41617 sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups 2024-01-03



About   -   Send Feedback to @ubuntu_updates