openssh-9.6p1-2.fc40 RPM for x86_64

From Fedora 40 updates for x86_64 / Packages / o

SSH (Secure SHell) is a program for logging into and executing
commands on a remote machine. SSH is intended to replace rlogin and
rsh, and to provide secure encrypted communications between two
untrusted hosts over an insecure network. X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's version of the last free version of SSH, bringing
it up to date in terms of security and features.

This package includes the core files necessary for both the OpenSSH
client and server. To make this package useful, you should also
install openssh-clients, openssh-server, or both.

Provides

• openssh
• config(openssh)
• openssh(x86-64)

Requires

• /sbin/nologin
• audit-libs >= 1.0.8
• config(openssh) = 9.6p1-2.fc40
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.14)(64bit)
• libc.so.6(GLIBC_2.17)(64bit)
• libc.so.6(GLIBC_2.2.5)(64bit)
• libc.so.6(GLIBC_2.25)(64bit)
• libc.so.6(GLIBC_2.26)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libc.so.6(GLIBC_2.36)(64bit)
• libc.so.6(GLIBC_2.38)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_2.8)(64bit)
• libc.so.6(GLIBC_ABI_DT_RELR)(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libselinux >= 2.3-5
• libselinux.so.1()(64bit)
• libselinux.so.1(LIBSELINUX_1.0)(64bit)
• libz.so.1()(64bit)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rtld(GNU_HASH)

License

BSD-3-Clause AND BSD-2-Clause AND ISC AND SSH-OpenSSH AND ssh-keyscan AND sprintf AND LicenseRef-Fedora-Public-Domain AND X11-distribute-modifications-variant

Changelog

* Tue Feb 18 2025 Dmitry Belyavskiy <[email protected]> - 9.6p1-2
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465, CVE-2025-26466).
* Tue Jul 02 2024 Dmitry Belyavskiy <[email protected]> - 9.6p1-1.4
  - rebuilt
* Mon Jul 01 2024 Daniel Milnes <[email protected]> - 9.6p1-1.3
  - Backport fix for CVE-2024-6387 (rhbz#2294879)
  - Backport fix for ObscureKeystrokeTiming logic error from OpenSSH 9.8
* Thu Jan 25 2024 Fedora Release Engineering <[email protected]> - 9.6p1-1.2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <[email protected]> - 9.6p1-1.1
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Tue Dec 26 2023 Daniel Milnes <[email protected]> - 9.6p1-1
  - Update to OpenSSH 9.6
    Original patches from https://src.fedoraproject.org/rpms/openssh/pull-request/63
    Tuned by Dmitry Belyavskiy for GSS and PKCS#11 URI processing
* Fri Dec 22 2023 Florian Weimer <[email protected]> - 9.3p1-13.1
  - Fix type errors in downstream gssapi-keyex patch
* Mon Oct 16 2023 Mattias Ellert <[email protected]> - 9.3p1-13
  - Fix issue with read-only ssh buffer during gssapi key exchange (rhbz#1938224)
  - https://github.com/openssh-gsskex/openssh-gsskex/pull/19
* Sun Oct 15 2023 Mattias Ellert <[email protected]> - 9.3p1-12
  - Fix FTBFS due to implicit declarations (rhbz#2241211)
* Tue Sep 19 2023 Dmitry Belyavskiy <[email protected]> - 9.3p1-11
  - migrated to SPDX license
* Fri Sep 15 2023 Timothée Ravier <[email protected]> - 9.3p1-10
  - Revert "Remove sshd.socket unit (rhbz#2025716)"
* Thu Aug 03 2023 Norbert Pocs <[email protected]> - 9.3p1-9
  - pkcs11: Add support for 'serial' in PKCS#11 URI
  - Apply the upstream MR related to the previous pkcs11 issue
  - https://github.com/openssh/openssh-portable/pull/406
* Thu Aug 03 2023 Dmitry Belyavskiy <[email protected]> - 9.3p1-8
  - Split including crypto-policies to a separate config (rhbz#1970566)
  - Disable forking of ssh-agent on startup (rhbz#2148555)
  - Remove sshd.socket unit (rhbz#2025716)
  - Minor optimization of ssh_krb5_kuserok (rhbz#2112501)
* Tue Aug 01 2023 Dmitry Belyavskiy <[email protected]> - 9.3p1-7
  - Relax checks of OpenSSL version
* Wed Jul 26 2023 Mattias Ellert <[email protected]> - 9.3p1-6
  - Update gssapi-keyex patch for OpenSSH 9.0+
* Fri Jul 21 2023 Dmitry Belyavskiy <[email protected]> - 9.3p1-5
  - Fix remote code execution in ssh-agent PKCS#11 support
    Resolves: CVE-2023-38408
* Thu Jul 20 2023 Fedora Release Engineering <[email protected]> - 9.3p1-3.1
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu Jun 08 2023 Norbert Pocs <[email protected]> - 9.3p1-4
  - Fix deprecated %patchN syntax
  - Reduce the number of patches by merging related patches
* Wed Jun 07 2023 Dmitry Belyavskiy <[email protected]> - 9.3p1-3
  - Fix DSS verification problem
    Resolves: rhbz#2212937
* Fri Jun 02 2023 Dmitry Belyavskiy <[email protected]> - 9.3p1-2
  - Remove unused patch
* Thu Jun 01 2023 Dmitry Belyavskiy <[email protected]> - 9.3p1-1 + 0.10.4-9
  - Rebase OpenSSH to 9.3p1
* Wed May 24 2023 Norbert Pocs <[email protected]> - 9.0p1-18
  - Fix pkcs11 issue with the recent changes
  - Clarify HostKeyAlgorithms relation with crypto-policies
* Fri Apr 14 2023 Dmitry Belyavskiy <[email protected]> - 9.0p1-17
  - In case when sha1 signatures are not supported, fallback to sha2 in hostproof
  - Audit logging patch was not applied (rhbz#2177471)
* Thu Apr 13 2023 Norbert Pocs <[email protected]> - 9.0p1-16
  - Make the sign, dh, ecdh processes FIPS compliant by adopting to
    openssl 3.0
* Thu Apr 13 2023 Dmitry Belyavskiy <[email protected]> - 9.0p1-15
  - Fix self-DoS
    Resolves: CVE-2023-25136
  - Remove too aggressive coverity fix causing native tests failure
* Wed Apr 12 2023 Florian Weimer <[email protected]> - 9.0p1-14.2
  - C99 compatiblity fixes
* Tue Mar 14 2023 Timothée Ravier <[email protected]> - 9.0p1-14
  - Make sshd & sshd@ units want ssh-host-keys-migration.service
* Mon Mar 13 2023 Zoltan Fridrich <[email protected]> - 9.0p1-13
  - Add sk-dummy subpackage for test purposes (rhbz#2176795)
* Mon Mar 06 2023 Dusty Mabe <[email protected]> - 9.0p1-12
  - Mark /var/lib/.ssh-host-keys-migration as %ghost file
  - Make ssh-host key migration less conditional
* Wed Mar 01 2023 Dusty Mabe <[email protected]> - 9.0p1-11
  - Provide a systemd unit for restoring default host key permissions (rhbz#2172956)
  - Co-Authored by Timothée Ravier <[email protected]>

Files

/etc/ssh
/etc/ssh/moduli
/usr/bin/ssh-keygen
/usr/lib/.build-id
/usr/lib/.build-id/db
/usr/lib/.build-id/db/632c00f8d2549b17860e7240fe14150781ebdb
/usr/lib/.build-id/ef
/usr/lib/.build-id/ef/5936a6b69cc3964da23f0a022c0772887b0094
/usr/libexec/openssh
/usr/libexec/openssh/ssh-keysign
/usr/share/doc/openssh
/usr/share/doc/openssh/CREDITS
/usr/share/doc/openssh/ChangeLog
/usr/share/doc/openssh/OVERVIEW
/usr/share/doc/openssh/PROTOCOL
/usr/share/doc/openssh/PROTOCOL.agent
/usr/share/doc/openssh/PROTOCOL.certkeys
/usr/share/doc/openssh/PROTOCOL.chacha20poly1305
/usr/share/doc/openssh/PROTOCOL.key
/usr/share/doc/openssh/PROTOCOL.krl
/usr/share/doc/openssh/PROTOCOL.mux
/usr/share/doc/openssh/PROTOCOL.sshsig
/usr/share/doc/openssh/PROTOCOL.u2f
/usr/share/doc/openssh/README
/usr/share/doc/openssh/README.dns
/usr/share/doc/openssh/README.platform
/usr/share/doc/openssh/README.privsep
/usr/share/doc/openssh/README.tun
/usr/share/doc/openssh/TODO
/usr/share/licenses/openssh
/usr/share/licenses/openssh/LICENCE
/usr/share/man/man1/ssh-keygen.1.gz
/usr/share/man/man8/ssh-keysign.8.gz

Generated by rpm2html 1.8.1

Fabrice Bellet, Mon Mar 3 02:25:26 2025