OpenSSH Buffer Mismanagement Vulnerabilities

OpenSSH Buffer Mismanagement Vulnerabilities

Solution:
Fixes are available. Please see the references for details.

RedHat openssh-2.9p2-7.i386.rpm

Red Hat openssh-3.1p1-10.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/openssh-3.1p1-10.i386.rpm

Red Hat openssh-3.1p1-14.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/openssh-3.1p1-14.i386.rpm

RedHat openssh-clients-3.4p1-2.i386.rpm

Red Hat openssh-clients-3.4p1-5.i386.rpm
ftp://updates.redhat.com/8.0/en/os/i386/openssh-clients-3.4p1-5.i386.r pm

Red Hat openssh-clients-3.4p1-7.i386.rpm
ftp://updates.redhat.com/8.0/en/os/i386/openssh-clients-3.4p1-7.i386.r pm

RedHat openssh-clients-2.9p2-7.ia64.rpm

Red Hat openssh-clients-3.1p1-10.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/openssh-clients-3.1p1-10.ia64. rpm

Red Hat openssh-clients-3.1p1-14.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/openssh-clients-3.1p1-14.ia64. rpm

RedHat openssh-2.9p2-7.ia64.rpm

Red Hat openssh-3.1p1-10.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/openssh-3.1p1-10.ia64.rpm

Red Hat openssh-3.1p1-14.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/openssh-3.1p1-14.ia64.rpm

RedHat openssh-server-3.4p1-2.i386.rpm

Red Hat openssh-server-3.4p1-5.i386.rpm
ftp://updates.redhat.com/8.0/en/os/i386/openssh-server-3.4p1-5.i386.rp m

Red Hat openssh-server-3.4p1-7.i386.rpm
ftp://updates.redhat.com/8.0/en/os/i386/openssh-server-3.4p1-7.i386.rp m

RedHat openssh-3.1p1-3.i386.rpm

Red Hat openssh-3.1p1-10.i386.rpm
ftp://updates.redhat.com/7.3/en/os/i386/openssh-3.1p1-10.i386.rpm

Red Hat openssh-3.1p1-14.i386.rpm
ftp://updates.redhat.com/7.3/en/os/i386/openssh-3.1p1-14.i386.rpm

RedHat openssh-askpass-gnome-2.5.2p2-5.i386.rpm

Red Hat openssh-askpass-gnome-3.1p1-13.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/openssh-askpass-gnome-3.1p1-13 .i386.rpm

Red Hat openssh-askpass-gnome-3.1p1-9.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/openssh-askpass-gnome-3.1p1-9. i386.rpm

RedHat openssh-clients-3.5p1-6.i386.rpm

Red Hat openssh-clients-3.5p1-11.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/openssh-clients-3.5p1-11.i386.rp m

Red Hat openssh-clients-3.5p1-9.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/openssh-clients-3.5p1-9.i386.rpm

RedHat openssh-3.5p1-6.i386.rpm

Red Hat openssh-3.5p1-11.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/openssh-3.5p1-11.i386.rpm

Red Hat openssh-3.5p1-9.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/openssh-3.5p1-9.i386.rpm

OpenSSH OpenSSH 2.9.9

OpenSSH openssh-3.7.1.tgz
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.7.1.tgz

S.u.S.E. openssh-2.9.9p2-108.ppc.rpm
ftp://ftp.suse.com/pub/suse/ppc/update/7.3/sec1/openssh-2.9.9p2-108.pp c.rpm

S.u.S.E. openssh-2.9.9p2-155.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.2/sec1/openssh-2.9.9p2-155.i 386.rpm

S.u.S.E. openssh-2.9.9p2-155.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.3/sec1/openssh-2.9.9p2-155.i 386.rpm

S.u.S.E. openssh-2.9.9p2-52.sparc.rpm
ftp://ftp.suse.com/pub/suse/sparc/update/7.3/sec1/openssh-2.9.9p2-52.s parc.rpm

OpenSSH OpenSSH 3.0 p1

OpenSSH openssh-3.7.1.tgz
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.7.1.tgz

OpenSSH OpenSSH 3.0.1 p1

OpenSSH openssh-3.7.1.tgz
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.7.1.tgz

Trustix openssh-clients-3.1.0p1-6tr.i586.rpm
ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/openssh-clients-3.1 .0p1-6tr.i586.rpm

Trustix openssh-server-3.1.0p1-6tr.i586.rpm
ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/openssh-server-3.1. 0p1-6tr.i586.rpm

OpenSSH OpenSSH 3.1

OpenSSH openssh-3.7.1.tgz
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.7.1.tgz

OpenSSH OpenSSH 3.2.3 p1

OpenSSH openssh-3.7.1.tgz
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.7.1.tgz

OpenSSH OpenSSH 3.6.1 p2

FreeBSD Diff for /src/crypto/openssh/buffer.c between version 1.1.1.6 and 1.1.1.7
http://www.freebsd.org/cgi/cvsweb.cgi/src/crypto/openssh/buffer.c.diff ?r1=1.1.1.6&r2=1.1.1.7&f=h

OpenSSH openssh-3.7.1.tgz
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.7.1.tgz

Trustix openssh-clients-3.6.1p2-4tr.i586.rpm
ftp://ftp.trustix.net/pub/Trustix/updates/2.0/RPMS/openssh-clients-3.6 .1p2-4tr.i586.rpm

Trustix openssh-server-3.6.1p2-4tr.i586.rpm
ftp://ftp.trustix.net/pub/Trustix/updates/2.0/RPMS/openssh-server-3.6. 1p2-4tr.i586.rpm

Trustix openssh-server-config-3.6.1p2-4tr.i586.rpm
ftp://ftp.trustix.net/pub/Trustix/updates/2.0/RPMS/openssh-server-conf ig-3.6.1p2-4tr.i586.rpm

OpenSSH OpenSSH 3.7

OpenSSH openssh-3.7.1.tgz
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.7.1.tgz

TurboLinux openssh-3.7.1p1-4.i386.rpm
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/AdvancedServ er/6/ja/updates/RPMS/openssh-3.7.1p1-4.i386.rpm

TurboLinux openssh-askpass-3.7.1p1-4.i386.rpm
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/AdvancedServ er/6/ja/updates/RPMS/openssh-askpass-3.7.1p1-4.i386.rpm

TurboLinux openssh-askpass-gnome-3.7.1p1-4.i386.rpm
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/AdvancedServ er/6/ja/updates/RPMS/openssh-askpass-gnome-3.7.1p1-4.i386.rpm

TurboLinux openssh-clients-3.7.1p1-4.i386.rpm
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/AdvancedServ er/6/ja/updates/RPMS/openssh-clients-3.7.1p1-4.i386.rpm

TurboLinux openssh-server-3.7.1p1-4.i386.rpm
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/AdvancedServ er/6/ja/updates/RPMS/openssh-server-3.7.1p1-4.i386.rpm

SGI IRIX 6.5.20 f

SGI patch5405.tar
ftp://patches.sgi.com/support/free/security/patches/6.5.20/patch5405.t ar

SGI IRIX 6.5.20 m

SGI patch5405.tar
ftp://patches.sgi.com/support/free/security/patches/6.5.20/patch5405.t ar

SGI IRIX 6.5.21 m

SGI patch5363.tar
ftp://patches.sgi.com/support/free/security/patches/6.5.21/patch5363.t ar