openssh-9.9p1-9.fc43 RPM for x86_64

From Fedora Rawhide for x86_64 / o

SSH (Secure SHell) is a program for logging into and executing
commands on a remote machine. SSH is intended to replace rlogin and
rsh, and to provide secure encrypted communications between two
untrusted hosts over an insecure network. X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's version of the last free version of SSH, bringing
it up to date in terms of security and features.

This package includes the core files necessary for both the OpenSSH
client and server. To make this package useful, you should also
install openssh-clients, openssh-server, or both.

Provides

• openssh
• config(openssh)
• openssh(x86-64)

Requires

• /sbin/nologin
• audit-libs >= 1.0.8
• config(openssh) = 9.9p1-9.fc43
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.14)(64bit)
• libc.so.6(GLIBC_2.17)(64bit)
• libc.so.6(GLIBC_2.2.5)(64bit)
• libc.so.6(GLIBC_2.25)(64bit)
• libc.so.6(GLIBC_2.26)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libc.so.6(GLIBC_2.36)(64bit)
• libc.so.6(GLIBC_2.38)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_2.8)(64bit)
• libc.so.6(GLIBC_ABI_DT_RELR)(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libselinux >= 2.3-5
• libselinux.so.1()(64bit)
• libselinux.so.1(LIBSELINUX_1.0)(64bit)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rtld(GNU_HASH)

License

BSD-3-Clause AND BSD-2-Clause AND ISC AND SSH-OpenSSH AND ssh-keyscan AND sprintf AND LicenseRef-Fedora-Public-Domain AND X11-distribute-modifications-variant

Changelog

* Tue Feb 18 2025 Dmitry Belyavskiy <[email protected]> - 9.9p1-9
  - Fix regression of Match directive processing
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465, CVE-2025-26466).
* Sat Feb 01 2025 Björn Esser <[email protected]> - 9.9p1-8.1
  - Add explicit BR: libxcrypt-devel
* Wed Jan 29 2025 FeRD (Frank Dana) <[email protected]> - 9.9p1-8
  - Replace deprecated (since 8.7) ChallengeResponseAuthentication
    with KbdInteractiveAuthentication, in redhat sshd config
* Mon Jan 27 2025 Dmitry Belyavskiy <[email protected]> - 9.9p1-7
  - Fix regression of Match directive processing
    Resolves: rhbz#2341769
* Mon Jan 27 2025 Dmitry Belyavskiy <[email protected]> - 9.9p1-6
  - Remove pam-ssh-agent subcomponent
    Resolves: rhbz#2338440
* Fri Jan 17 2025 Fedora Release Engineering <[email protected]> - 9.9p1-5.1
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Mon Oct 28 2024 Dmitry Belyavskiy <[email protected]> - 9.9p1-5
  - Fix MLKEM for BE platforms
* Wed Oct 16 2024 Dmitry Belyavskiy <[email protected]> - 9.9p1-4
  - Resolve memory management issues after rebase
  - Define OPTIONS env in systemd modules (https://src.fedoraproject.org/rpms/openssh/pull-request/92)
* Fri Oct 11 2024 Dmitry Belyavskiy <[email protected]> - 9.9p1-3
  - Separate ssh-keysign to a dedicated package
  - Use FIPS KEX defaults in FIPS mode
* Thu Oct 10 2024 Dmitry Belyavskiy <[email protected]> - 9.9p1-2
  - Update version of pam_ssh_agent_auth
* Tue Oct 08 2024 Dmitry Belyavskiy <[email protected]> - 9.9p1-1
  - Update to OpenSSH 9.9p1
* Tue Sep 03 2024 Dmitry Belyavskiy <[email protected]> - 9.8p1-4
  - Synchronize patches from Red Hat
* Mon Aug 05 2024 Dmitry Belyavskiy <[email protected]> - 9.8p1-3
  - Sshd now proposes to enter password again when a non-existing user is specified
* Fri Jul 26 2024 Dmitry Belyavskiy <[email protected]> - 9.8p1-2
  - Change default key type in FIPS mode
* Mon Jul 22 2024 Dmitry Belyavskiy <[email protected]> - 9.8p1-1
  - Update to OpenSSH 9.8p1
* Thu Jul 18 2024 Fedora Release Engineering <[email protected]> - 9.6p1-1.14
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Tue Jul 02 2024 Dmitry Belyavskiy <[email protected]> - 9.6p1-1.13
  - rebuilt
* Mon Jul 01 2024 Gordon Messmer <[email protected]> - 9.6p1-12
  - Patch 9.6p1 for CVE-2024-6387
* Mon Jul 01 2024 Gordon Messmer <[email protected]> - 9.6p1-11
  - Shorten paths used for parallel tests to fix BZ#2295117
* Thu May 09 2024 Zoltan Fridrich <[email protected]> - 9.6p1-10
  - Correctly audit hostname and IP address
  - Make default key sizes configurable in sshd-keygen
* Wed Apr 24 2024 Dmitry Belyavskiy <[email protected]> - 9.6p1-1.9
  - Use OpenSSL SSH KDF implementation - s390x fixup
* Wed Apr 24 2024 Dmitry Belyavskiy <[email protected]> - 9.6p1-1.8
  - Use OpenSSL SSH KDF implementation
* Wed Apr 17 2024 Dmitry Belyavskiy <[email protected]> - 9.6p1-1.7
  - Only set PAM_RHOST if the remote host is not "UNKNOWN"
    https://src.fedoraproject.org/rpms/openssh/pull-request/71
    Patch by Daan De Meyer <[email protected]>
  - Some spec cleanup
    https://src.fedoraproject.org/rpms/openssh/pull-request/74
    by Zbigniew Jędrzejewski-Szmek <[email protected]>
* Thu Apr 04 2024 Dmitry Belyavskiy <[email protected]> - 9.6p1-1.6
  - rebuilt
* Thu Apr 04 2024 Dmitry Belyavskiy <[email protected]> - 9.6p1-1.5
  - rebuilt
* Tue Apr 02 2024 Gordon Messmer <[email protected]> - 9.6p1-1.4
  - Build OpenSSH without libsystemd dependency, using reference implementation
* Wed Mar 13 2024 Dmitry Belyavskiy <[email protected]> - 9.6p1-1.3
  - Build OpenSSH without engine support
  - Make tests run at build phase (using parallel run mechanism by Alexander Sosedkin)
* Thu Jan 25 2024 Fedora Release Engineering <[email protected]> - 9.6p1-1.2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <[email protected]> - 9.6p1-1.1
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Tue Dec 26 2023 Daniel Milnes <[email protected]> - 9.6p1-1
  - Update to OpenSSH 9.6
    Original patches from https://src.fedoraproject.org/rpms/openssh/pull-request/63
    Tuned by Dmitry Belyavskiy for GSS and PKCS#11 URI processing
* Fri Dec 22 2023 Florian Weimer <[email protected]> - 9.3p1-13.1
  - Fix type errors in downstream gssapi-keyex patch
* Mon Oct 16 2023 Mattias Ellert <[email protected]> - 9.3p1-13
  - Fix issue with read-only ssh buffer during gssapi key exchange (rhbz#1938224)
  - https://github.com/openssh-gsskex/openssh-gsskex/pull/19
* Sun Oct 15 2023 Mattias Ellert <[email protected]> - 9.3p1-12
  - Fix FTBFS due to implicit declarations (rhbz#2241211)
* Tue Sep 19 2023 Dmitry Belyavskiy <[email protected]> - 9.3p1-11
  - migrated to SPDX license
* Fri Sep 15 2023 Timothée Ravier <[email protected]> - 9.3p1-10
  - Revert "Remove sshd.socket unit (rhbz#2025716)"
* Thu Aug 03 2023 Norbert Pocs <[email protected]> - 9.3p1-9
  - pkcs11: Add support for 'serial' in PKCS#11 URI
  - Apply the upstream MR related to the previous pkcs11 issue
  - https://github.com/openssh/openssh-portable/pull/406
* Thu Aug 03 2023 Dmitry Belyavskiy <[email protected]> - 9.3p1-8
  - Split including crypto-policies to a separate config (rhbz#1970566)
  - Disable forking of ssh-agent on startup (rhbz#2148555)
  - Remove sshd.socket unit (rhbz#2025716)
  - Minor optimization of ssh_krb5_kuserok (rhbz#2112501)
* Tue Aug 01 2023 Dmitry Belyavskiy <[email protected]> - 9.3p1-7
  - Relax checks of OpenSSL version
* Wed Jul 26 2023 Mattias Ellert <[email protected]> - 9.3p1-6
  - Update gssapi-keyex patch for OpenSSH 9.0+
* Fri Jul 21 2023 Dmitry Belyavskiy <[email protected]> - 9.3p1-5
  - Fix remote code execution in ssh-agent PKCS#11 support
    Resolves: CVE-2023-38408
* Thu Jul 20 2023 Fedora Release Engineering <[email protected]> - 9.3p1-3.1
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu Jun 08 2023 Norbert Pocs <[email protected]> - 9.3p1-4
  - Fix deprecated %patchN syntax
  - Reduce the number of patches by merging related patches
* Wed Jun 07 2023 Dmitry Belyavskiy <[email protected]> - 9.3p1-3
  - Fix DSS verification problem
    Resolves: rhbz#2212937
* Fri Jun 02 2023 Dmitry Belyavskiy <[email protected]> - 9.3p1-2
  - Remove unused patch
* Thu Jun 01 2023 Dmitry Belyavskiy <[email protected]> - 9.3p1-1 + 0.10.4-9
  - Rebase OpenSSH to 9.3p1
* Wed May 24 2023 Norbert Pocs <[email protected]> - 9.0p1-18
  - Fix pkcs11 issue with the recent changes
  - Clarify HostKeyAlgorithms relation with crypto-policies
* Fri Apr 14 2023 Dmitry Belyavskiy <[email protected]> - 9.0p1-17
  - In case when sha1 signatures are not supported, fallback to sha2 in hostproof
  - Audit logging patch was not applied (rhbz#2177471)
* Thu Apr 13 2023 Norbert Pocs <[email protected]> - 9.0p1-16
  - Make the sign, dh, ecdh processes FIPS compliant by adopting to
    openssl 3.0
* Thu Apr 13 2023 Dmitry Belyavskiy <[email protected]> - 9.0p1-15
  - Fix self-DoS
    Resolves: CVE-2023-25136
  - Remove too aggressive coverity fix causing native tests failure
* Wed Apr 12 2023 Florian Weimer <[email protected]> - 9.0p1-14.2
  - C99 compatiblity fixes
* Tue Mar 14 2023 Timothée Ravier <[email protected]> - 9.0p1-14
  - Make sshd & sshd@ units want ssh-host-keys-migration.service
* Mon Mar 13 2023 Zoltan Fridrich <[email protected]> - 9.0p1-13
  - Add sk-dummy subpackage for test purposes (rhbz#2176795)
* Mon Mar 06 2023 Dusty Mabe <[email protected]> - 9.0p1-12
  - Mark /var/lib/.ssh-host-keys-migration as %ghost file
  - Make ssh-host key migration less conditional
* Wed Mar 01 2023 Dusty Mabe <[email protected]> - 9.0p1-11
  - Provide a systemd unit for restoring default host key permissions (rhbz#2172956)
  - Co-Authored by Timothée Ravier <[email protected]>

Files

/etc/ssh
/etc/ssh/moduli
/usr/bin/ssh-keygen
/usr/lib/.build-id
/usr/lib/.build-id/f1
/usr/lib/.build-id/f1/5d70204a329b3147533e8e8f681c345592b707
/usr/libexec/openssh
/usr/share/doc/openssh
/usr/share/doc/openssh/CREDITS
/usr/share/doc/openssh/ChangeLog
/usr/share/doc/openssh/OVERVIEW
/usr/share/doc/openssh/PROTOCOL
/usr/share/doc/openssh/PROTOCOL.agent
/usr/share/doc/openssh/PROTOCOL.certkeys
/usr/share/doc/openssh/PROTOCOL.chacha20poly1305
/usr/share/doc/openssh/PROTOCOL.key
/usr/share/doc/openssh/PROTOCOL.krl
/usr/share/doc/openssh/PROTOCOL.mux
/usr/share/doc/openssh/PROTOCOL.sshsig
/usr/share/doc/openssh/PROTOCOL.u2f
/usr/share/doc/openssh/README
/usr/share/doc/openssh/README.dns
/usr/share/doc/openssh/README.platform
/usr/share/doc/openssh/README.privsep
/usr/share/doc/openssh/README.tun
/usr/share/doc/openssh/TODO
/usr/share/licenses/openssh
/usr/share/licenses/openssh/LICENCE
/usr/share/man/man1/ssh-keygen.1.gz

Generated by rpm2html 1.8.1

Fabrice Bellet, Mon Mar 3 00:12:19 2025