Publishing details

Removed from disk on 2016-08-16.
Removal requested on 2016-08-16.
Superseded on 2016-08-15 by openssh - 1:6.6p1-2ubuntu2.8
Published on 2016-05-09
Copied from ubuntu trusty in Private PPA for Ubuntu Security Team by Ubuntu Archive Robot

Changelog

openssh (1:6.6p1-2ubuntu2.7) trusty-security; urgency=medium

  * SECURITY UPDATE: privilege escalation via environment files when
    UseLogin is configured
    - debian/patches/CVE-2015-8325.patch: ignore PAM environment vars when
      UseLogin is enabled in session.c.
    - CVE-2015-8325
  * SECURITY UPDATE: fallback from untrusted X11-forwarding to trusted
    - debian/patches/CVE-2016-1908-1.patch: use stack memory in
      clientloop.c.
    - debian/patches/CVE-2016-1908-2.patch: eliminate fallback in
      clientloop.c, clientloop.h, mux.c, ssh.c.
    - CVE-2016-1908
  * SECURITY UPDATE: shell-command restrictions bypass via crafted X11
    forwarding data
    - debian/patches/CVE-2016-3115.patch: sanitise characters destined for
      xauth in session.c.
    - CVE-2016-3115

 -- Marc Deslauriers <email address hidden>  Thu, 05 May 2016 08:29:07 -0400

Available diffs

diff from 1:6.6p1-2ubuntu2.6 (in Ubuntu) to 1:6.6p1-2ubuntu2.7 (4.9 KiB)
diff from 1:6.6p1-2ubuntu2.4 to 1:6.6p1-2ubuntu2.7 (6.1 KiB)

Builds

Package files

openssh-client-dbgsym_6.6p1-2ubuntu2.7_amd64.ddeb (949.1 KiB)
openssh-client-dbgsym_6.6p1-2ubuntu2.7_arm64.ddeb (971.8 KiB)
openssh-client-dbgsym_6.6p1-2ubuntu2.7_armhf.ddeb (942.0 KiB)
openssh-client-dbgsym_6.6p1-2ubuntu2.7_i386.ddeb (902.6 KiB)
openssh-client-dbgsym_6.6p1-2ubuntu2.7_powerpc.ddeb (924.2 KiB)
openssh-client-dbgsym_6.6p1-2ubuntu2.7_ppc64el.ddeb (1.1 MiB)
openssh-client-udeb-dbgsym_6.6p1-2ubuntu2.7_amd64.ddeb (460.6 KiB)
openssh-client-udeb-dbgsym_6.6p1-2ubuntu2.7_arm64.ddeb (465.5 KiB)
openssh-client-udeb-dbgsym_6.6p1-2ubuntu2.7_armhf.ddeb (462.4 KiB)
openssh-client-udeb-dbgsym_6.6p1-2ubuntu2.7_i386.ddeb (384.7 KiB)
openssh-client-udeb-dbgsym_6.6p1-2ubuntu2.7_powerpc.ddeb (428.0 KiB)
openssh-client-udeb-dbgsym_6.6p1-2ubuntu2.7_ppc64el.ddeb (465.2 KiB)
openssh-client-udeb_6.6p1-2ubuntu2.7_amd64.udeb (243.0 KiB)
openssh-client-udeb_6.6p1-2ubuntu2.7_arm64.udeb (221.6 KiB)
openssh-client-udeb_6.6p1-2ubuntu2.7_armhf.udeb (229.2 KiB)
openssh-client-udeb_6.6p1-2ubuntu2.7_i386.udeb (247.8 KiB)
openssh-client-udeb_6.6p1-2ubuntu2.7_powerpc.udeb (222.6 KiB)
openssh-client-udeb_6.6p1-2ubuntu2.7_ppc64el.udeb (221.6 KiB)
openssh-client_6.6p1-2ubuntu2.7_amd64.deb (550.6 KiB)
openssh-client_6.6p1-2ubuntu2.7_arm64.deb (473.4 KiB)
openssh-client_6.6p1-2ubuntu2.7_armhf.deb (511.4 KiB)
openssh-client_6.6p1-2ubuntu2.7_i386.deb (563.4 KiB)
openssh-client_6.6p1-2ubuntu2.7_powerpc.deb (510.8 KiB)
openssh-client_6.6p1-2ubuntu2.7_ppc64el.deb (553.6 KiB)
openssh-server-dbgsym_6.6p1-2ubuntu2.7_amd64.ddeb (544.7 KiB)
openssh-server-dbgsym_6.6p1-2ubuntu2.7_arm64.ddeb (550.8 KiB)
openssh-server-dbgsym_6.6p1-2ubuntu2.7_armhf.ddeb (530.0 KiB)
openssh-server-dbgsym_6.6p1-2ubuntu2.7_i386.ddeb (511.8 KiB)
openssh-server-dbgsym_6.6p1-2ubuntu2.7_powerpc.ddeb (532.8 KiB)
openssh-server-dbgsym_6.6p1-2ubuntu2.7_ppc64el.ddeb (637.3 KiB)
openssh-server-udeb-dbgsym_6.6p1-2ubuntu2.7_amd64.ddeb (542.2 KiB)
openssh-server-udeb-dbgsym_6.6p1-2ubuntu2.7_arm64.ddeb (554.3 KiB)
openssh-server-udeb-dbgsym_6.6p1-2ubuntu2.7_armhf.ddeb (543.9 KiB)
openssh-server-udeb-dbgsym_6.6p1-2ubuntu2.7_i386.ddeb (453.2 KiB)
openssh-server-udeb-dbgsym_6.6p1-2ubuntu2.7_powerpc.ddeb (502.7 KiB)
openssh-server-udeb-dbgsym_6.6p1-2ubuntu2.7_ppc64el.ddeb (551.1 KiB)
openssh-server-udeb_6.6p1-2ubuntu2.7_amd64.udeb (272.5 KiB)
openssh-server-udeb_6.6p1-2ubuntu2.7_arm64.udeb (249.5 KiB)
openssh-server-udeb_6.6p1-2ubuntu2.7_armhf.udeb (254.3 KiB)
openssh-server-udeb_6.6p1-2ubuntu2.7_i386.udeb (275.6 KiB)
openssh-server-udeb_6.6p1-2ubuntu2.7_powerpc.udeb (245.5 KiB)
openssh-server-udeb_6.6p1-2ubuntu2.7_ppc64el.udeb (248.2 KiB)
openssh-server_6.6p1-2ubuntu2.7_amd64.deb (314.0 KiB)
openssh-server_6.6p1-2ubuntu2.7_arm64.deb (276.4 KiB)
openssh-server_6.6p1-2ubuntu2.7_armhf.deb (309.1 KiB)
openssh-server_6.6p1-2ubuntu2.7_i386.deb (317.7 KiB)
openssh-server_6.6p1-2ubuntu2.7_powerpc.deb (313.7 KiB)
openssh-server_6.6p1-2ubuntu2.7_ppc64el.deb (333.4 KiB)
openssh-sftp-server-dbgsym_6.6p1-2ubuntu2.7_amd64.ddeb (66.2 KiB)
openssh-sftp-server-dbgsym_6.6p1-2ubuntu2.7_arm64.ddeb (68.4 KiB)
openssh-sftp-server-dbgsym_6.6p1-2ubuntu2.7_armhf.ddeb (65.6 KiB)
openssh-sftp-server-dbgsym_6.6p1-2ubuntu2.7_i386.ddeb (62.1 KiB)
openssh-sftp-server-dbgsym_6.6p1-2ubuntu2.7_powerpc.ddeb (66.6 KiB)
openssh-sftp-server-dbgsym_6.6p1-2ubuntu2.7_ppc64el.ddeb (81.6 KiB)
openssh-sftp-server_6.6p1-2ubuntu2.7_amd64.deb (33.4 KiB)
openssh-sftp-server_6.6p1-2ubuntu2.7_arm64.deb (27.6 KiB)
openssh-sftp-server_6.6p1-2ubuntu2.7_armhf.deb (29.9 KiB)
openssh-sftp-server_6.6p1-2ubuntu2.7_i386.deb (34.7 KiB)
openssh-sftp-server_6.6p1-2ubuntu2.7_powerpc.deb (33.1 KiB)
openssh-sftp-server_6.6p1-2ubuntu2.7_ppc64el.deb (35.9 KiB)
openssh_6.6p1-2ubuntu2.7.debian.tar.gz (183.8 KiB)
openssh_6.6p1-2ubuntu2.7.dsc (2.7 KiB)
openssh_6.6p1.orig.tar.gz (1.2 MiB)
ssh-askpass-gnome-dbgsym_6.6p1-2ubuntu2.7_amd64.ddeb (13.0 KiB)
ssh-askpass-gnome-dbgsym_6.6p1-2ubuntu2.7_arm64.ddeb (13.3 KiB)
ssh-askpass-gnome-dbgsym_6.6p1-2ubuntu2.7_armhf.ddeb (13.3 KiB)
ssh-askpass-gnome-dbgsym_6.6p1-2ubuntu2.7_i386.ddeb (12.9 KiB)
ssh-askpass-gnome-dbgsym_6.6p1-2ubuntu2.7_powerpc.ddeb (13.3 KiB)
ssh-askpass-gnome-dbgsym_6.6p1-2ubuntu2.7_ppc64el.ddeb (13.6 KiB)
ssh-askpass-gnome_6.6p1-2ubuntu2.7_amd64.deb (14.1 KiB)
ssh-askpass-gnome_6.6p1-2ubuntu2.7_arm64.deb (13.8 KiB)
ssh-askpass-gnome_6.6p1-2ubuntu2.7_armhf.deb (13.7 KiB)
ssh-askpass-gnome_6.6p1-2ubuntu2.7_i386.deb (14.0 KiB)
ssh-askpass-gnome_6.6p1-2ubuntu2.7_powerpc.deb (13.9 KiB)
ssh-askpass-gnome_6.6p1-2ubuntu2.7_ppc64el.deb (14.0 KiB)
ssh-krb5_6.6p1-2ubuntu2.7_all.deb (7.8 KiB)
ssh_6.6p1-2ubuntu2.7_all.deb (1.1 KiB)