openssh-4.3p2-29.3AXS3

エラータID: AXSA:2009-405:03

Release date: 
Friday, October 9, 2009 - 14:39
Subject: 
openssh-4.3p2-29.3AXS3
Affected Channels: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
High
Description: 

SSH (Secure SHell) is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forwarded over the secure channel.
OpenSSH is OpenBSD's version of the last free version of SSH, bringing it up to date in terms of security and features, as well as removing all patented algorithms to separate libraries.
This package includes the core files necessary for both the OpenSSH client and server. To make this package useful, you should also install openssh-clients, openssh-server, or both.
Fixed bugs:
CVE-2009-2904
A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux (RHEL) 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, related torequirements for directory ownership.

Solution: 

Update packages

Additional Info: 

N/A

Download: 

SRPMS
  1. openssh-4.3p2-29.3AXS3.src.rpm
    MD5: 0c779bfd5e78e6674aad0d31f157c80f
    SHA-256: 6fa42d6bd9aaeae532818d0aa38fe9b9019294eef3c2ec05b20b7808c0456e74
    Size: 882.39 kB

Asianux Server 3 for x86
  1. openssh-4.3p2-29.3AXS3.i386.rpm
    MD5: 9061ed526e8a81b2917599413c3d48d2
    SHA-256: a40b13315a20c5af3f0a9f6ff6ec256fe6890fe7195fb9ef185553464f1443b5
    Size: 286.22 kB
  2. openssh-askpass-4.3p2-29.3AXS3.i386.rpm
    MD5: 33d76a0badfd698a28f6a1924acc26c4
    SHA-256: 1d76d9f49a11d5765bbc01102d12ee18190119bbd5fe2928b2d9327c90583e5b
    Size: 39.09 kB
  3. openssh-clients-4.3p2-29.3AXS3.i386.rpm
    MD5: 16aa504edf7c6d719200a30bf1fb2453
    SHA-256: 63fc18314a9d1e87021167a3daf77b7abf8cd0f3956313d70d43818e20c6d9f1
    Size: 446.08 kB
  4. openssh-server-4.3p2-29.3AXS3.i386.rpm
    MD5: d6c8f9f173279425385dd41f33bac76b
    SHA-256: 8582f4b1e1333033e3a22a86fa545ca653f6744fc1566ecae880be79528529c4
    Size: 267.47 kB

Asianux Server 3 for x86_64
  1. openssh-4.3p2-29.3AXS3.x86_64.rpm
    MD5: 0a79e564449577c3f0616f24c8ff5d88
    SHA-256: ee7987d447a1e72a3a391e7c789776f0f4b94e3d997502279d219d89d50664ab
    Size: 286.26 kB
  2. openssh-askpass-4.3p2-29.3AXS3.x86_64.rpm
    MD5: 4907242e8e27c80f046d944b30c20fc3
    SHA-256: b8500942190b5d11e315543aaae1eb35d60e37bf61c97abe3e611d7c67538037
    Size: 39.53 kB
  3. openssh-clients-4.3p2-29.3AXS3.x86_64.rpm
    MD5: 15bc8dcf04dad6071d7f350b726ca1a5
    SHA-256: d6021d4c745b99fab78744d40dc2a14ec7fac83e94380b413454067919a15851
    Size: 447.37 kB
  4. openssh-server-4.3p2-29.3AXS3.x86_64.rpm
    MD5: b1f222949d69bb6714df500aebf31f50
    SHA-256: 812929c39118de985f7fde622a5f0d4bec17e5047e788a70baf2f2b1ac3f50f5
    Size: 272.14 kB