[ol7_u8_security_validation] openssh-ldap-7.4p1-21.0.3.el7.aarch64

Name:	openssh-ldap
Version:	7.4p1
Release:	21.0.3.el7
Architecture:	aarch64
Group:	System Environment/Daemons
Size:	151350
License:	BSD
RPM:	openssh-ldap-7.4p1-21.0.3.el7.aarch64.rpm
Source RPM:	openssh-7.4p1-21.0.3.el7.src.rpm
Build Date:	Thu Feb 11 2021
Build Host:	ca-buildarm04.us.oracle.com
Vendor:	Oracle America
URL:	http://www.openssh.com/portable.html
Summary:	A LDAP support for open source SSH server daemon
Description:	OpenSSH LDAP backend is a way how to distribute the authorized tokens among the servers in the network.

Changelog (Show File list) (Show related packages)

Fri Dec 11 2020 Ilya Okomin <ilya.okomin@oracle.com> - 7.4p1-21.0.3

- Enable fips KDF POST [Orabug: 32461750]
- Disable diffie-hellman-group-exchange-sha256 KEX FIPS method [Orabug: 32461739]

Fri Oct 25 2019 Herbert van den Bergh <herbert.van.den.bergh@oracle.com> - 7.4p1-21.0.1

- enlarge format buffer size for certificate serial
  number so the log message can record any 64-bit integer without
  truncation (openssh bz#3012) [Orabug: 30448895]

Tue Jun 25 2019 Jakub Jelen <jjelen@redhat.com> - 7.4p1-21 + 0.10.3-2

- Avoid double comma in the default cipher list in FIPS mode (#1722446)

Tue May 21 2019 Jakub Jelen <jjelen@redhat.com> - 7.4p1-20 + 0.10.3-2
```
- Revert the updating of cached passwd structure (#1712053)
```
Mon Mar 04 2019 Jakub Jelen <jjelen@redhat.com> - 7.4p1-19 + 0.10.3-2
```
- Update cached passwd structure after PAM authentication (#1674541)
```

Wed Feb 13 2019 Jakub Jelen <jjelen@redhat.com> - 7.4p1-18 + 0.10.3-2

- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)

Mon Jan 14 2019 Jakub Jelen <jjelen@redhat.com> - 7.4p1-17 + 0.10.3-2

- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)

Fri Nov 24 2017 Jakub Jelen <jjelen@redhat.com> - 7.4p1-16 + 0.10.3-2
```
- Fix for CVE-2017-15906 (#1517226)
```

Mon Nov 06 2017 Jakub Jelen <jjelen@redhat.com> - 7.4p1-15 + 0.10.3-2

- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)

Fri Nov 03 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> - 7.4p1-14 + 0.10.3-2
```
- Rebuilt for RHEL-7.5
```