openssh-5.3p1-122.AXS4

SSH (Secure SHell) is a program for logging into and executing
commands on a remote machine. SSH is intended to replace rlogin and
rsh, and to provide secure encrypted communications between two
untrusted hosts over an insecure network. X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's version of the last free version of SSH, bringing
it up to date in terms of security and features.

This package includes the core files necessary for both the OpenSSH
client and server. To make this package useful, you should also
install openssh-clients, openssh-server, or both.

Security issues fixed with this release:

CVE-2015-8325
The do_setup_env function in session.c in sshd in OpenSSH through
7.2p2, when the UseLogin feature is enabled and PAM is configured to
read .pam_environment files in user home directories, allows local
users to gain privileges by triggering a crafted environment for the
/bin/login program, as demonstrated by an LD_PRELOAD environment
variable.

Additional Changes: