[SECURITY] Fedora Core 5 Test Update: openssh-4.3p2-4.11.fc5

[Tomas Mraz]

---------------------------------------------------------------------
Fedora Test Update Notification
FEDORA-2006-1214
2006-11-10
---------------------------------------------------------------------

Product     : Fedora Core 5
Name        : openssh
Version     : 4.3p2
Release     : 4.11.fc5
Summary     : The OpenSSH implementation of SSH protocol versions 1 and 2
Description :
SSH (Secure SHell) is a program for logging into and executing
commands on a remote machine. SSH is intended to replace rlogin and
rsh, and to provide secure encrypted communications between two
untrusted hosts over an insecure network. X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's version of the last free version of SSH, bringing
it up to date in terms of security and features, as well as removing
all patented algorithms to separate libraries.

This package includes the core files necessary for both the OpenSSH
client and server. To make this package useful, you should also
install openssh-clients, openssh-server, or both.

---------------------------------------------------------------------
Update Information:

Low severity security update.
---------------------------------------------------------------------
* Fri Nov 10 2006 Tomas Mraz <tmraz at redhat.com> - 4.3p2-4.11
- CVE-2006-5794 - properly detect failed key verify in monitor (#214641)
- kill all ssh sessions when stop is called in halt or reboot runlevel (#213008)
- remove -TERM option from killproc so we don't race on sshd restart (#213490)
* Mon Oct  2 2006 Tomas Mraz <tmraz at redhat.com> - 4.3p2-4.10
- improve gssapi-no-spnego patch (#208102)
- CVE-2006-4924 - prevent DoS on deattack detector (#207957)
- CVE-2006-5051 - don't call cleanups from signal handler (#208459)
* Wed Sep 13 2006 Tomas Mraz <tmraz at redhat.com> - 4.3p2-4.1
- sync with FC6 version
- build for FC5
* Wed Aug 23 2006 Tomas Mraz <tmraz at redhat.com> - 4.3p2-9
- don't report duplicate syslog messages, use correct local time (#189158)
- don't allow spnego as gssapi mechanism (from upstream)
- fixed memleaks found by Coverity (from upstream)
- allow ip options except source routing (#202856) (patch by HP)
* Tue Aug  8 2006 Tomas Mraz <tmraz at redhat.com> - 4.3p2-8
- drop the pam-session patch from the previous build (#201341)
- don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)
* Thu Jul 20 2006 Tomas Mraz <tmraz at redhat.com> - 4.3p2-7
- dropped old ssh obsoletes
- call the pam_session_open/close from the monitor when privsep is
  enabled so it is always called as root (patch by Darren Tucker)
* Mon Jul 17 2006 Tomas Mraz <tmraz at redhat.com> - 4.3p2-6
- improve selinux patch (by Jan Kiszka)
- upstream patch for buffer append space error (#191940)
- fixed typo in configure.ac (#198986)
- added pam_keyinit to pam configuration (#198628)
- improved error message when askpass dialog cannot grab
  keyboard input (#198332)
- buildrequires xauth instead of xorg-x11-xauth
- fixed a few rpmlint warnings
* Wed Jul 12 2006 Jesse Keating <jkeating at redhat.com> - 4.3p2-5.1
- rebuild
* Fri Apr 14 2006 Tomas Mraz <tmraz at redhat.com> - 4.3p2-5
- don't request pseudoterminal allocation if stdin is not tty (#188983)

---------------------------------------------------------------------
This update can be downloaded from:
    http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/5/

93132cccc3bbf443ddbd97c0825e75d82ba163bc  SRPMS/openssh-4.3p2-4.11.fc5.src.rpm
93132cccc3bbf443ddbd97c0825e75d82ba163bc  noarch/openssh-4.3p2-4.11.fc5.src.rpm
167bcbc65c9618266c31331df35aedb5ec47693a  ppc/openssh-clients-4.3p2-4.11.fc5.ppc.rpm
e6a123ecd684162b8ac089f4e55c4f1fa92571ed  ppc/openssh-server-4.3p2-4.11.fc5.ppc.rpm
1fc3e7b5512c84488ea3b20b98cece2cf9a1c3fb  ppc/debug/openssh-debuginfo-4.3p2-4.11.fc5.ppc.rpm
fcbeda1a3d788b93b37a473f128d8c4eedd3ff28  ppc/openssh-4.3p2-4.11.fc5.ppc.rpm
029a536ad49cd69e11b6536c6f559fb7c4b1ec23  ppc/openssh-askpass-4.3p2-4.11.fc5.ppc.rpm
f44fa92f0a447bf9e4c145434d039e348260fd97  x86_64/openssh-4.3p2-4.11.fc5.x86_64.rpm
0ca01b242efd04b2ec3638090559afc7613eb26d  x86_64/openssh-clients-4.3p2-4.11.fc5.x86_64.rpm
6624e911badda59a61ab49df47fe71c85ed52426  x86_64/openssh-server-4.3p2-4.11.fc5.x86_64.rpm
4a0fd8d1ae78acb3451fd306307ffb76405c25d3  x86_64/debug/openssh-debuginfo-4.3p2-4.11.fc5.x86_64.rpm
5a751d86d5fac905f80f3d00634cdc17c3cdfd7f  x86_64/openssh-askpass-4.3p2-4.11.fc5.x86_64.rpm
2dd8534639360b618de683bf7f379278d67e3f32  i386/openssh-4.3p2-4.11.fc5.i386.rpm
f7e5cd2614169d00773df80388a55172eab987e8  i386/openssh-server-4.3p2-4.11.fc5.i386.rpm
90a43f190199e82fc3b90a6d50f6d62a71cda7ce  i386/openssh-askpass-4.3p2-4.11.fc5.i386.rpm
9d8d6aa6fe8ade1e48aa3996c2f24ee691bcdbb3  i386/debug/openssh-debuginfo-4.3p2-4.11.fc5.i386.rpm
cdfc9a58ac54c6304a5cc3048b6aa198fc91a51d  i386/openssh-clients-4.3p2-4.11.fc5.i386.rpm

This update can be installed with the 'yum' update program.  Use 'yum update
package-name' at the command line.  For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------