[SECURITY] Fedora Core 6 Test Update: openssh-4.3p2-19.fc6

[Miloslav Trmac]

---------------------------------------------------------------------
Fedora Test Update Notification
FEDORA-2007-394
2007-03-31
---------------------------------------------------------------------

Product     : Fedora Core 6
Name        : openssh
Version     : 4.3p2
Release     : 19.fc6
Summary     : The OpenSSH implementation of SSH protocol versions 1 and 2
Description :
SSH (Secure SHell) is a program for logging into and executing
commands on a remote machine. SSH is intended to replace rlogin and
rsh, and to provide secure encrypted communications between two
untrusted hosts over an insecure network. X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's version of the last free version of SSH, bringing
it up to date in terms of security and features, as well as removing
all patented algorithms to separate libraries.

This package includes the core files necessary for both the OpenSSH
client and server. To make this package useful, you should also
install openssh-clients, openssh-server, or both.

---------------------------------------------------------------------
Update Information:

If no new regressions are reported, this update will be
pushed final on Apr 3.
---------------------------------------------------------------------
* Fri Mar 30 2007 Miloslav Trmac <mitr at redhat.com> - 4.3p2-19
- Fix an information leak in Kerberos password authentication (CVE-2006-5052)
  Resolves: #234640
* Tue Feb 27 2007 Tomas Mraz <tmraz at redhat.com> - 4.3p2-18
- reject connection if requested mls range is not obtained (#229278)
* Fri Feb  9 2007 Tomas Mraz <tmraz at redhat.com> - 4.3p2-17
- allow selecting non-default roles and audit role changes (#227733)
* Thu Jan 11 2007 Tomas Mraz <tmraz at redhat.com> - 4.3p2-16
- support also level selection on unlabeled networks (#220487)
* Fri Dec 22 2006 Tomas Mraz <tmraz at redhat.com> - 4.3p2-15
- make sshd work with mls networking (patch by Klaus Weidner) (#220487)

---------------------------------------------------------------------
This update can be downloaded from:
    http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/6/

a5090fc17a8f275f290188cb11df77652e37e03d  SRPMS/openssh-4.3p2-19.fc6.src.rpm
a5090fc17a8f275f290188cb11df77652e37e03d  noarch/openssh-4.3p2-19.fc6.src.rpm
ff8f0cfa027a0b1332286751fad5d22d62506a5d  ppc/openssh-server-4.3p2-19.fc6.ppc.rpm
ffec07b3fc857a727a1a3e77e0629eeb9f6c2d14  ppc/debug/openssh-debuginfo-4.3p2-19.fc6.ppc.rpm
dec133b48c5a9c4b9835c3ff634bcdd63efa61de  ppc/openssh-clients-4.3p2-19.fc6.ppc.rpm
8de7b67ac1393bbbdc4ae8ef9dabec545719d712  ppc/openssh-4.3p2-19.fc6.ppc.rpm
67cca1677a5a913c41d4c75ba0a3dfd4074377ee  ppc/openssh-askpass-4.3p2-19.fc6.ppc.rpm
4b829824bbf3182ba30947cc95d7b8df97d34a7e  x86_64/debug/openssh-debuginfo-4.3p2-19.fc6.x86_64.rpm
e2c60dc271f587f360516d23162e589d7182b3c7  x86_64/openssh-4.3p2-19.fc6.x86_64.rpm
66752480fdaa66765a07c9ec76d6ed8bdcc494bd  x86_64/openssh-server-4.3p2-19.fc6.x86_64.rpm
3e9e74e2df5533179acafc382b5e0458384c1c3e  x86_64/openssh-clients-4.3p2-19.fc6.x86_64.rpm
40840597d27e12642489c18a730ec3752bd94d3d  x86_64/openssh-askpass-4.3p2-19.fc6.x86_64.rpm
349c35079f4f79a883d5a5dfbe996e352de8a630  i386/openssh-4.3p2-19.fc6.i386.rpm
8674aee2644a5fdf48f10428c4118225adbf2a2f  i386/debug/openssh-debuginfo-4.3p2-19.fc6.i386.rpm
c50714bb7e5993a669ca4536d69a7cfdf61826eb  i386/openssh-askpass-4.3p2-19.fc6.i386.rpm
171ab03a8f815c1a60b7521749bcb0e4312ff33a  i386/openssh-clients-4.3p2-19.fc6.i386.rpm
97f83165d344946c7631456ca978a566b01cbc50  i386/openssh-server-4.3p2-19.fc6.i386.rpm

This update can be installed with the 'yum' update program.  Use 'yum update
package-name' at the command line.  For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------