Fixes and enhancements to ssh-agent (#1263, PowerShell/openssh-portable#363) Fixes to enable auto-updating knownhosts via ssh and ssh-keygen ( #1323 ) Fixes to other issues listed here. The latest stable version of openssh-server available from the Red Hat repositories for RHEL 7 is 7.4p1 and, the latest beta version available from the Red Hat repositories for RHEL 8 is 7.8p1. So if you want to install openssh-server 7.9p1: there is currently one option I'd suggest. You can download the latest stable version 7.9p1 of openssh from the fedora project and install it manually. In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred. 3 CVE-2019-6109: 284: 2019-01-31: 2019-05-03. OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it up to date in terms of security and features, as well as removing all patented algorithms to seperate libraries (OpenSSL). This package contains the secure shell daemon. The sshd is the server part of the secure shell protocol and allows ssh clients to connect to your host.

• Openssh 7.9 P1 Exploit Metasploit
• Openssh 7.9 P1 Download
• Openssh 7.9 P100
• Openssh 7.9p1 Vulnerabilities

Package Details: openssh-git 7.9.P1.r242.gf5abb05f-1

Package Actions

• View PKGBUILD / View Changes

Openssh 7.9 P1 Exploit Metasploit

Dependencies (8)

Openssh 7.9 P1 Download

• krb5(krb5-git, krb5-minimal-git)
• ldns(ldns-git)
• openssl(libressl-git, openssl-purify, openssl-zlib, openssl-git, openssl-weak-ciphers, openssl-hardened, openssl-static)
• git(git-git)(make)
• linux-headers(linux-surfacepro3-git-headers, linux-aarch64-rock64-bin-headers, linux-ec2-headers, linux-galliumos-headers, linux-zest-git-headers, linux-lts49-kallsyms-headers, linux-bootsplash-headers, linux-odroid-headers, linux-phicomm-n1-headers)(make)
• x11-ssh-askpass(gnome-ssh-askpass2, ssh-askpass-fullscreen, ksshaskpass-git, seahorse-git, gnome-ssh-askpass3, xaskpass, ksshaskpass, openssh-askpass, seahorse)(optional) – input passphrase in X
• xorg-xauth(optional) – X11 forwarding

Required by (297)

Openssh 7.9 P100

• airvpn-beta-bin(requires openssh)(optional)
• airvpn-bin(requires openssh)(optional)
• amanda(requires openssh)
• apt-dater(requires openssh)
• apt-dater-legacy(requires openssh)
• arkade-bin(requires openssh)
• asbru-cm(requires openssh)(optional)
• asbru-cm(requires openssh)
• asbru-cm-git(requires openssh)
• asbru-cm-git(requires openssh)(optional)
• asbru-cm-loki-git(requires openssh)(optional)
• asbru-cm-loki-git(requires openssh)
• astk(requires openssh)
• astk(requires openssh)(optional)
• backintime-cli(requires openssh)
• backintime-cli-git(requires openssh)
• backintime-cli-git(requires openssh)(make)
• backintime-git(requires openssh)(make)
• balena-cli(requires openssh)(optional)
• balena-cli-bin(requires openssh)(optional)
• bbcp-git(requires openssh)
• beef-cerberus-git(requires openssh)
• borg-git(requires openssh)(optional)
• bosh-cli(requires openssh)(optional)
• btrbk(requires openssh)(optional)
• btrbk-git(requires openssh)(optional)
• btrfs-sxbackup(requires openssh)(optional)
• buceutils-git(requires openssh)
• buildbot-git(requires openssh)(check)
• buildroot-meta(requires openssh)(optional)
• buildstuff(requires openssh)
• calendar(requires openssh)(make)
• cdist(requires openssh)
• clustershell(requires openssh)(optional)
• collabora-online-server-nodocker(requires openssh)
• collabora-online-server-nodocker_ar(requires openssh)
• collabora-online-server-nodocker_as(requires openssh)
• collabora-online-server-nodocker_bg(requires openssh)
• collabora-online-server-nodocker_bn-in(requires openssh)
• collabora-online-server-nodocker_br(requires openssh)
• collabora-online-server-nodocker_ca(requires openssh)
• collabora-online-server-nodocker_ca-valencia(requires openssh)
• collabora-online-server-nodocker_cs(requires openssh)
• collabora-online-server-nodocker_cy(requires openssh)
• collabora-online-server-nodocker_da(requires openssh)
• collabora-online-server-nodocker_de(requires openssh)
• collabora-online-server-nodocker_el(requires openssh)
• collabora-online-server-nodocker_en(requires openssh)
• collabora-online-server-nodocker_en-gb(requires openssh)
• collabora-online-server-nodocker_es(requires openssh)
• collabora-online-server-nodocker_et(requires openssh)
• collabora-online-server-nodocker_eu(requires openssh)
• collabora-online-server-nodocker_fi(requires openssh)
• collabora-online-server-nodocker_fr(requires openssh)
• collabora-online-server-nodocker_ga(requires openssh)
• collabora-online-server-nodocker_gd(requires openssh)
• collabora-online-server-nodocker_gl(requires openssh)
• collabora-online-server-nodocker_gu(requires openssh)
• collabora-online-server-nodocker_he(requires openssh)
• collabora-online-server-nodocker_hi(requires openssh)
• collabora-online-server-nodocker_hr(requires openssh)
• collabora-online-server-nodocker_hu(requires openssh)
• collabora-online-server-nodocker_id(requires openssh)
• collabora-online-server-nodocker_is(requires openssh)
• collabora-online-server-nodocker_it(requires openssh)
• collabora-online-server-nodocker_ja(requires openssh)
• collabora-online-server-nodocker_km(requires openssh)
• collabora-online-server-nodocker_kn(requires openssh)
• collabora-online-server-nodocker_ko(requires openssh)
• collabora-online-server-nodocker_lt(requires openssh)
• collabora-online-server-nodocker_lv(requires openssh)
• collabora-online-server-nodocker_ml(requires openssh)
• collabora-online-server-nodocker_mr(requires openssh)
• collabora-online-server-nodocker_nb(requires openssh)
• collabora-online-server-nodocker_nl(requires openssh)
• collabora-online-server-nodocker_nn(requires openssh)
• collabora-online-server-nodocker_no(requires openssh)
• collabora-online-server-nodocker_oc(requires openssh)
• collabora-online-server-nodocker_or(requires openssh)
• collabora-online-server-nodocker_pa-in(requires openssh)
• collabora-online-server-nodocker_pl(requires openssh)
• collabora-online-server-nodocker_pt(requires openssh)
• collabora-online-server-nodocker_pt-br(requires openssh)
• collabora-online-server-nodocker_pt-pt(requires openssh)
• collabora-online-server-nodocker_ro(requires openssh)
• collabora-online-server-nodocker_ru(requires openssh)
• collabora-online-server-nodocker_sk(requires openssh)
• collabora-online-server-nodocker_sl(requires openssh)
• collabora-online-server-nodocker_sr(requires openssh)
• collabora-online-server-nodocker_sr-latn(requires openssh)
• collabora-online-server-nodocker_sv(requires openssh)
• collabora-online-server-nodocker_ta(requires openssh)
• collabora-online-server-nodocker_te(requires openssh)
• collabora-online-server-nodocker_tr(requires openssh)
• collabora-online-server-nodocker_uk(requires openssh)
• collabora-online-server-nodocker_vi(requires openssh)
• collabora-online-server-nodocker_zh-cn(requires openssh)
• collabora-online-server-nodocker_zh-tw(requires openssh)
• croco-tools-base-git(requires openssh)
• cros-container-guest-tools-git(requires openssh)
• curlbomb(requires openssh)(optional)
• cutehmi-external-meta(requires openssh)(optional)
• cvs-feature(requires openssh)(optional)
• dataleech(requires openssh)
• ddns(requires openssh)(optional)
• ddns-git(requires openssh)(optional)
• devtools-git(requires openssh)
• devtools32-git(requires openssh)
• diffoscope-git(requires openssh)(check)
• diffoscope-git(requires openssh)(optional)
• dracut-sshd-git(requires openssh)
• dscp(requires openssh)
• eclipse-dltk-shelled(requires openssh)(optional)
• eddie-cli(requires openssh)(optional)
• eddie-cli-git(requires openssh)(optional)
• eddie-ui(requires openssh)(optional)
• eddie-ui-git(requires openssh)(optional)
• envoy(requires openssh)
• envoy-git(requires openssh)
• ethoscope-device(requires openssh)
• ethoscope-node(requires openssh)
• extraterm-git(requires openssh)(make)
• fish-ssh-agent-git(requires openssh)
• fusioninventory-agent(requires openssh)(optional)
• gadmin-rsync(requires openssh)
• gandi.cli-git(requires openssh)
• gates-of-tartaros(requires openssh)(optional)
• getnewip(requires openssh)
• gin-cli(requires openssh)
• git-annex-cabal(requires openssh)
• git-annex-stack(requires openssh)
• git-deliver(requires openssh)
• gitea-git(requires openssh)(optional)
• gitlab-ee(requires openssh)
• gmi(requires openssh)
• gnome-control-center-git(requires openssh)(optional)
• gnome-control-center-nocheese(requires openssh)(optional)
• gnome-control-center-system76(requires openssh)(optional)
• gnome-keyring-git(requires openssh)
• gnome-rdp(requires openssh)(optional)
• gnupg-git(requires openssh)(check)
• gnupg-large-secmem(requires openssh)(check)
• gnupg-largekeys(requires openssh)(check)
• gnupg-minimal-git(requires openssh)(check)
• gnupg-scdaemon-shared-access(requires openssh)(check)
• gnupot(requires openssh)
• gogs(requires openssh)(optional)
• gogs-dev-git(requires openssh)(optional)
• gogs-git(requires openssh)(optional)
• goscanpdf(requires openssh)
• gossm-bin(requires openssh)
• got-diminished(requires openssh)(optional)
• gstm(requires openssh)
• gstm-git(requires openssh)
• gstm-gtk2(requires openssh)
• gvfs-afc-git(requires openssh)(make)
• gvfs-git(requires openssh)(make)
• gvfs-goa-git(requires openssh)(make)
• gvfs-google-git(requires openssh)(make)
• gvfs-gphoto2-git(requires openssh)(make)
• gvfs-mtp-git(requires openssh)(make)
• gvfs-nfs-git(requires openssh)(make)
• gvfs-smb-git(requires openssh)(make)
• hadoop(requires openssh)
• hash-slinger(requires openssh)(optional)
• hash-slinger-git(requires openssh)(optional)
• hollywood(requires openssh)
• holo(requires openssh)(make)
• holo(requires openssh)(optional)
• jellyshot-git(requires openssh)
• jim(requires openssh)
• k3sup-bin(requires openssh)
• kana-p-git(requires openssh)
• khefin(requires openssh)(optional)
• ksvnupdater(requires openssh)(optional)
• let-me-do(requires openssh)
• libssh-gnutls(requires openssh)(make)
• libssh-gnutls-docs(requires openssh)(make)
• link-backup(requires openssh)
• linux-timemachine-git(requires openssh)(optional)
• lone-tar(requires openssh)
• luckybackup(requires openssh)
• mandoc-cvs(requires openssh)(make)
• mandos-server(requires openssh)
• massh(requires openssh)
• maxio-git(requires openssh)
• molly-guard(requires openssh)
• monkeysphere(requires openssh)(check)
• mosh-git(requires openssh)
• mosh-sshagent-git(requires openssh)
• mpich(requires openssh)
• mpssh(requires openssh)
• mssh-git(requires openssh)
• muchsync(requires openssh)
• mysecureshell(requires openssh)
• netdrive-connector(requires openssh)
• networkmanager-dispatcher-sshd(requires openssh)
• nomachine(requires openssh)
• nx3-all(requires openssh)(optional)
• openmpi-gcc8(requires openssh)
• openmpi-gcc9(requires openssh)
• openmpi3(requires openssh)
• opennebula(requires openssh)
• openssh-known-hosts(requires openssh)(optional)
• openstack-nova(requires openssh)
• openstack-nova-doc(requires openssh)
• outrun-git(requires openssh)
• pacmanager-bin(requires openssh)
• pacmanager-git(requires openssh)
• pacpush(requires openssh)
• pacrepo-git(requires openssh)
• pam_ssh(requires openssh)
• pam_ssh_agent_auth(requires openssh)(optional)
• pam_ssh_agent_auth-git(requires openssh)(optional)
• pdsh(requires openssh)
• pdsh-genders(requires openssh)
• php-ssh(requires openssh)
• php-ssh-git(requires openssh)
• php-ssh-unstable(requires openssh)
• php56-ssh(requires openssh)
• piconnect-git(requires openssh)
• pitrery(requires openssh)(optional)
• pkgbuild-version-updater(requires openssh)
• plasma-runners-ssh(requires openssh)
• polysh(requires openssh)
• praetorian(requires openssh)
• prey-node-client(requires openssh)
• pvpn(requires openssh)
• pycharm-eap(requires openssh)(optional)
• pycharm-professional(requires openssh)(optional)
• pycharm-professional-edition(requires openssh)(optional)
• python-apache-libcloud(requires openssh)(check)
• python-btrfs-backup(requires openssh)(optional)
• python-pssh(requires openssh)
• python-ssh2(requires openssh)(check)
• python2-scoop(requires openssh)
• qssh(requires openssh)
• ragnar-git(requires openssh)
• rehackable_scripts-git(requires openssh)
• restream-git(requires openssh)
• rssh(requires openssh)
• safekeep(requires openssh)
• scannerl(requires openssh)
• scannerl-git(requires openssh)
• sibt-git(requires openssh)
• ssh-askpass-fullscreen(requires openssh)
• ssh-faker(requires openssh)
• ssh-ident-git(requires openssh)
• ssh-import-id-bzr(requires openssh)
• ssh-tools(requires openssh)
• ssh-tools-git(requires openssh)
• sshcd(requires openssh)
• sshcode(requires openssh)
• sshconf(requires openssh)
• sshd-launcher(requires openssh)
• sshdfilter(requires openssh)
• sshexport(requires openssh)
• sshgrid-git(requires openssh)
• sshlm-git(requires openssh)
• sshmenu(requires openssh)
• sshmnt(requires openssh)
• sshmultitool(requires openssh)
• sshprint(requires openssh)
• sshrc(requires openssh)
• sshrc-git(requires openssh)
• sshsocksvpn(requires openssh)
• sshto-git(requires openssh)
• sshtunnel-git(requires openssh)
• sshuttle-git(requires openssh)
• standard-test-roles(requires openssh)
• sugar-git(requires openssh)
• synapse-bzr(requires openssh)(optional)
• task-git(requires openssh)(optional)
• teiler-git(requires openssh)(optional)
• tlclient(requires openssh)
• tmuxer-git(requires openssh)(optional)
• topal(requires openssh)(optional)
• torque(requires openssh)
• uenv(requires openssh)(optional)
• uenv-git(requires openssh)(optional)
• uniprint-git(requires openssh)
• unreal-engine(requires openssh)(make)
• unreal-engine-git(requires openssh)(make)
• upl-git(requires openssh)
• usocks(requires openssh)(optional)
• vpn-minute(requires openssh)(optional)
• walinuxagent(requires openssh)
• waypipe(requires openssh)(optional)
• waypipe-git(requires openssh)(optional)
• wemux(requires openssh)
• wemux-git(requires openssh)
• wemux-restrict(requires openssh)
• wesnoth-git(requires openssh)(make)
• xxh-git(requires openssh)
• zfs-snap-manager(requires openssh)
• zsh-theme-powerlevel9k-git(requires openssh)(optional)
• zsnapd(requires openssh)(optional)

jskier commented on 2020-01-22 23:39

Openssh 7.9p1 Vulnerabilities

Would you be willing to add config --with-security-key-builtin and libfido2 for u2f testing?