重要(Important):opensshのセキュリティアップデート
| アドバイスID: | RHSA-2006:0697-9 |
| 最終更新日: | 2006-09-28 |
| 影響のあるプロダクト: |
Red Hat Desktop (v. 3) Red Hat Desktop (v. 4) Red Hat Enterprise Linux AS (v. 3) Red Hat Enterprise Linux AS (v. 4) Red Hat Enterprise Linux ES (v. 3) Red Hat Enterprise Linux ES (v. 4) Red Hat Enterprise Linux WS (v. 3) Red Hat Enterprise Linux WS (v. 4) |
| CVEs (cve.mitre.org): |
CVE-2006-4924 CVE-2006-5051 |
セキュリティ・アドバイス
概要:
2つのセキュリティ欠陥を修正したopensshのアップデートパッケージがRed Hat Enterprise Linux 3および4で利用可能になりました。
このアップデートは、レッドハットセキュリティ対策チームによって、深刻度「重要(Important)」のセキュリティ問題と評価されています。
OpenSSHは、OpenBSDのSSH(Secure SHell)プロトコル実装です。このパッケージには、OpenSSHのクライアントとサーバの両方に必要なコアファイルが含まれています。
Mark Dowd氏がOpenSSHのsshdサーバでシグナルハンドラの競合状態を発見しました。リモート攻撃者がこの欠陥を利用してサービス拒否(クラッシュ)を引き起こす可能性があります(CVE-2006-5051)。OpenSSHプロジェクトでは、この欠陥の悪用が成功して任意のコードが実行される可能性は低いと考えています。しかし、レッドハットセキュリティ対策チームは、アップストリームの脆弱性情報が欠如しているため、この見解を確認できていません。したがって、この欠陥の修正をアップデートに含め、継続調査でこの問題が悪用可能であることがわかった場合にその深刻度を「重要」と格付けしました。
GoogleセキュリティチームのTavis Ormandy氏がOpenSSHのsshdサーバでサービス拒否のバグを発見しました。リモート攻撃者が巧妙に作成されたSSH-1要求をサーバに送信することにより、sshdに大量のCPUリソースを消費させることが可能です。(CVE-2006-4924)
opensshのすべてのユーザは、これらの問題を解決するバックポートパッチを含む上記アップデートパッケージにアップグレードしてください。
アップデート・パッケージ:
| Red Hat Desktop (v. 3) | |
| SRPMS: | |
| openssh-3.6.1p2-33.30.12.src.rpm | 8210acf1f435ab2035f18be8454293d4 |
| IA-32: | |
| openssh-3.6.1p2-33.30.12.i386.rpm | 89c6a0c942de0f4ad04f9bb025b8b92f |
| openssh-askpass-3.6.1p2-33.30.12.i386.rpm | cfea382c2e368089b0b7ddd734d1b196 |
| openssh-askpass-gnome-3.6.1p2-33.30.12.i386.rpm | 48e8e543f87823d973b5e6b41b206eda |
| openssh-clients-3.6.1p2-33.30.12.i386.rpm | dfd7de84def7466a23f42d7773b7de86 |
| openssh-server-3.6.1p2-33.30.12.i386.rpm | 3ac78136d49fa7a02673f4edc035ffe7 |
| x86_64: | |
| openssh-3.6.1p2-33.30.12.x86_64.rpm | 0dfabce4750cd29cf5983c1046abbdf2 |
| openssh-askpass-3.6.1p2-33.30.12.x86_64.rpm | 7ddc9d3c1aaa497e6e9f2ccfeef9ae63 |
| openssh-askpass-gnome-3.6.1p2-33.30.12.x86_64.rpm | 04689df5f2a4df0a6b7cf1358ad456cf |
| openssh-clients-3.6.1p2-33.30.12.x86_64.rpm | e662e6944cc24c928bae0a51850c5776 |
| openssh-server-3.6.1p2-33.30.12.x86_64.rpm | d4f75e6464c79333b96af81171803580 |
| Red Hat Desktop (v. 4) | |
| SRPMS: | |
| openssh-3.9p1-8.RHEL4.17.src.rpm | 51be48086e7c82696796fbf56aa8c71a |
| IA-32: | |
| openssh-3.9p1-8.RHEL4.17.i386.rpm | c3cfd9ebdd59ec90049c011d957ae2f2 |
| openssh-askpass-3.9p1-8.RHEL4.17.i386.rpm | b77a94f1ae3fc9e8e3f0ac26614bd2ae |
| openssh-askpass-gnome-3.9p1-8.RHEL4.17.i386.rpm | d7d1ae6eea1617248a1dd94d5aebfc56 |
| openssh-clients-3.9p1-8.RHEL4.17.i386.rpm | 88055f8b632235cb4f6c041c77426bb7 |
| openssh-server-3.9p1-8.RHEL4.17.i386.rpm | 20e5ab164e2064fef4ee808eeca16e09 |
| x86_64: | |
| openssh-3.9p1-8.RHEL4.17.x86_64.rpm | 300fd86cea1f8687f1f48d202e850cb5 |
| openssh-askpass-3.9p1-8.RHEL4.17.x86_64.rpm | 025cfa10b241256c250c2a7bfac3bde3 |
| openssh-askpass-gnome-3.9p1-8.RHEL4.17.x86_64.rpm | 7abd38612b83c438dfc680a5e7c1b5fe |
| openssh-clients-3.9p1-8.RHEL4.17.x86_64.rpm | fd7e4e3239444a616ff2d367a691a9a9 |
| openssh-server-3.9p1-8.RHEL4.17.x86_64.rpm | 24a2f23edd250635204f8ad486ca6920 |
| Red Hat Enterprise Linux AS (v. 3) | |
| SRPMS: | |
| openssh-3.6.1p2-33.30.12.src.rpm | 8210acf1f435ab2035f18be8454293d4 |
| IA-32: | |
| openssh-3.6.1p2-33.30.12.i386.rpm | 89c6a0c942de0f4ad04f9bb025b8b92f |
| openssh-askpass-3.6.1p2-33.30.12.i386.rpm | cfea382c2e368089b0b7ddd734d1b196 |
| openssh-askpass-gnome-3.6.1p2-33.30.12.i386.rpm | 48e8e543f87823d973b5e6b41b206eda |
| openssh-clients-3.6.1p2-33.30.12.i386.rpm | dfd7de84def7466a23f42d7773b7de86 |
| openssh-server-3.6.1p2-33.30.12.i386.rpm | 3ac78136d49fa7a02673f4edc035ffe7 |
| IA-64: | |
| openssh-3.6.1p2-33.30.12.ia64.rpm | 21a62ef6fbf25b1c3551e1d23e7188b4 |
| openssh-askpass-3.6.1p2-33.30.12.ia64.rpm | fbb11f16c2c5ee21b1e3aaec515945e7 |
| openssh-askpass-gnome-3.6.1p2-33.30.12.ia64.rpm | 5da88d2d69c64665788e60b126824bc1 |
| openssh-clients-3.6.1p2-33.30.12.ia64.rpm | 00120331cca393960c1ed8f6be8ce739 |
| openssh-server-3.6.1p2-33.30.12.ia64.rpm | cab6a4b4ce35eadb874c1d33930140d0 |
| PPC: | |
| openssh-3.6.1p2-33.30.12.ppc.rpm | ebf2a7d406a84c0e70cb6216da216c32 |
| openssh-askpass-3.6.1p2-33.30.12.ppc.rpm | d870455bea7f5dc7811cb2e94653ddda |
| openssh-askpass-gnome-3.6.1p2-33.30.12.ppc.rpm | 1f3cc9855ed90aa1cbe3e513c509894f |
| openssh-clients-3.6.1p2-33.30.12.ppc.rpm | 4ea6ff849faf590001a46bc5d8c3b0e0 |
| openssh-server-3.6.1p2-33.30.12.ppc.rpm | d3c45cba4d701c389c82d7cbd9026fce |
| s390: | |
| openssh-3.6.1p2-33.30.12.s390.rpm | ca9e19608f0c79d94c2cd82699daa287 |
| openssh-askpass-3.6.1p2-33.30.12.s390.rpm | c83593e17d6991a8101a3982fa9df5b3 |
| openssh-askpass-gnome-3.6.1p2-33.30.12.s390.rpm | a9efc41ec6458f035c579015ba7f3b98 |
| openssh-clients-3.6.1p2-33.30.12.s390.rpm | c5e8a4392e3f6be26c3cb61ca37ba3d5 |
| openssh-server-3.6.1p2-33.30.12.s390.rpm | b7d0f364841078bfe5cad8750ea638fa |
| s390x: | |
| openssh-3.6.1p2-33.30.12.s390x.rpm | 9d27c6f7bae2d4948a67a6ff6229b7c6 |
| openssh-askpass-3.6.1p2-33.30.12.s390x.rpm | 8261d07efa8d0647941cae4998f08f60 |
| openssh-askpass-gnome-3.6.1p2-33.30.12.s390x.rpm | 8926f0ebdbfe041f4921a793195e6814 |
| openssh-clients-3.6.1p2-33.30.12.s390x.rpm | d41e4131ee0e545215d76d9a2adeb09b |
| openssh-server-3.6.1p2-33.30.12.s390x.rpm | 63f58387200cc0c682a4ea41ffc86bfe |
| x86_64: | |
| openssh-3.6.1p2-33.30.12.x86_64.rpm | 0dfabce4750cd29cf5983c1046abbdf2 |
| openssh-askpass-3.6.1p2-33.30.12.x86_64.rpm | 7ddc9d3c1aaa497e6e9f2ccfeef9ae63 |
| openssh-askpass-gnome-3.6.1p2-33.30.12.x86_64.rpm | 04689df5f2a4df0a6b7cf1358ad456cf |
| openssh-clients-3.6.1p2-33.30.12.x86_64.rpm | e662e6944cc24c928bae0a51850c5776 |
| openssh-server-3.6.1p2-33.30.12.x86_64.rpm | d4f75e6464c79333b96af81171803580 |
| Red Hat Enterprise Linux AS (v. 4) | |
| SRPMS: | |
| openssh-3.9p1-8.RHEL4.17.src.rpm | 51be48086e7c82696796fbf56aa8c71a |
| IA-32: | |
| openssh-3.9p1-8.RHEL4.17.i386.rpm | c3cfd9ebdd59ec90049c011d957ae2f2 |
| openssh-askpass-3.9p1-8.RHEL4.17.i386.rpm | b77a94f1ae3fc9e8e3f0ac26614bd2ae |
| openssh-askpass-gnome-3.9p1-8.RHEL4.17.i386.rpm | d7d1ae6eea1617248a1dd94d5aebfc56 |
| openssh-clients-3.9p1-8.RHEL4.17.i386.rpm | 88055f8b632235cb4f6c041c77426bb7 |
| openssh-server-3.9p1-8.RHEL4.17.i386.rpm | 20e5ab164e2064fef4ee808eeca16e09 |
| IA-64: | |
| openssh-3.9p1-8.RHEL4.17.ia64.rpm | 45422334f78e143b6b2e4594eecdc4a2 |
| openssh-askpass-3.9p1-8.RHEL4.17.ia64.rpm | 97de282c9b352e9c7a939e9797a790c9 |
| openssh-askpass-gnome-3.9p1-8.RHEL4.17.ia64.rpm | 970aae2acb04f46f50d91a525c2c727e |
| openssh-clients-3.9p1-8.RHEL4.17.ia64.rpm | 65265a283172a054b6c66e7e8303dbde |
| openssh-server-3.9p1-8.RHEL4.17.ia64.rpm | 3af550bd7f29dc20a66bf6073f78e838 |
| PPC: | |
| openssh-3.9p1-8.RHEL4.17.ppc.rpm | b56f299da59de3d32569f19af8c4aa30 |
| openssh-askpass-3.9p1-8.RHEL4.17.ppc.rpm | 1584315bc0bc7549c8cc9875c116a33e |
| openssh-askpass-gnome-3.9p1-8.RHEL4.17.ppc.rpm | 6bc2ce2eb1990f3c26cabc5e29b20692 |
| openssh-clients-3.9p1-8.RHEL4.17.ppc.rpm | 7b4847ee68bb6490b016597f94ba3a55 |
| openssh-server-3.9p1-8.RHEL4.17.ppc.rpm | 77e9a0c82dbd22c5f926e24a0bab20cb |
| s390: | |
| openssh-3.9p1-8.RHEL4.17.s390.rpm | 22fcb9d4f74ea6d454f939b6e1dead06 |
| openssh-askpass-3.9p1-8.RHEL4.17.s390.rpm | 6a5fdd69ec65e44f7ba8abae8da59a11 |
| openssh-askpass-gnome-3.9p1-8.RHEL4.17.s390.rpm | 7c3e5d5d17e75b61b5d74aea581041f3 |
| openssh-clients-3.9p1-8.RHEL4.17.s390.rpm | 988c522bf640fb52fc39a3905bc054f4 |
| openssh-server-3.9p1-8.RHEL4.17.s390.rpm | fa05b3c293f1712f53f193f67fa4dd80 |
| s390x: | |
| openssh-3.9p1-8.RHEL4.17.s390x.rpm | 546fc534b924a611a6a257b64ed7867d |
| openssh-askpass-3.9p1-8.RHEL4.17.s390x.rpm | 6ee531e6723591741e1ea801d90b4447 |
| openssh-askpass-gnome-3.9p1-8.RHEL4.17.s390x.rpm | f3d1dee6e7cd55dfa3c557a99d2430b6 |
| openssh-clients-3.9p1-8.RHEL4.17.s390x.rpm | 2e42bb134cbe5ebdb25cf4fc606165fa |
| openssh-server-3.9p1-8.RHEL4.17.s390x.rpm | 94e50b5516ba1f08bc689981f4044b5d |
| x86_64: | |
| openssh-3.9p1-8.RHEL4.17.x86_64.rpm | 300fd86cea1f8687f1f48d202e850cb5 |
| openssh-askpass-3.9p1-8.RHEL4.17.x86_64.rpm | 025cfa10b241256c250c2a7bfac3bde3 |
| openssh-askpass-gnome-3.9p1-8.RHEL4.17.x86_64.rpm | 7abd38612b83c438dfc680a5e7c1b5fe |
| openssh-clients-3.9p1-8.RHEL4.17.x86_64.rpm | fd7e4e3239444a616ff2d367a691a9a9 |
| openssh-server-3.9p1-8.RHEL4.17.x86_64.rpm | 24a2f23edd250635204f8ad486ca6920 |
| Red Hat Enterprise Linux ES (v. 3) | |
| SRPMS: | |
| openssh-3.6.1p2-33.30.12.src.rpm | 8210acf1f435ab2035f18be8454293d4 |
| IA-32: | |
| openssh-3.6.1p2-33.30.12.i386.rpm | 89c6a0c942de0f4ad04f9bb025b8b92f |
| openssh-askpass-3.6.1p2-33.30.12.i386.rpm | cfea382c2e368089b0b7ddd734d1b196 |
| openssh-askpass-gnome-3.6.1p2-33.30.12.i386.rpm | 48e8e543f87823d973b5e6b41b206eda |
| openssh-clients-3.6.1p2-33.30.12.i386.rpm | dfd7de84def7466a23f42d7773b7de86 |
| openssh-server-3.6.1p2-33.30.12.i386.rpm | 3ac78136d49fa7a02673f4edc035ffe7 |
| IA-64: | |
| openssh-3.6.1p2-33.30.12.ia64.rpm | 21a62ef6fbf25b1c3551e1d23e7188b4 |
| openssh-askpass-3.6.1p2-33.30.12.ia64.rpm | fbb11f16c2c5ee21b1e3aaec515945e7 |
| openssh-askpass-gnome-3.6.1p2-33.30.12.ia64.rpm | 5da88d2d69c64665788e60b126824bc1 |
| openssh-clients-3.6.1p2-33.30.12.ia64.rpm | 00120331cca393960c1ed8f6be8ce739 |
| openssh-server-3.6.1p2-33.30.12.ia64.rpm | cab6a4b4ce35eadb874c1d33930140d0 |
| x86_64: | |
| openssh-3.6.1p2-33.30.12.x86_64.rpm | 0dfabce4750cd29cf5983c1046abbdf2 |
| openssh-askpass-3.6.1p2-33.30.12.x86_64.rpm | 7ddc9d3c1aaa497e6e9f2ccfeef9ae63 |
| openssh-askpass-gnome-3.6.1p2-33.30.12.x86_64.rpm | 04689df5f2a4df0a6b7cf1358ad456cf |
| openssh-clients-3.6.1p2-33.30.12.x86_64.rpm | e662e6944cc24c928bae0a51850c5776 |
| openssh-server-3.6.1p2-33.30.12.x86_64.rpm | d4f75e6464c79333b96af81171803580 |
| Red Hat Enterprise Linux ES (v. 4) | |
| SRPMS: | |
| openssh-3.9p1-8.RHEL4.17.src.rpm | 51be48086e7c82696796fbf56aa8c71a |
| IA-32: | |
| openssh-3.9p1-8.RHEL4.17.i386.rpm | c3cfd9ebdd59ec90049c011d957ae2f2 |
| openssh-askpass-3.9p1-8.RHEL4.17.i386.rpm | b77a94f1ae3fc9e8e3f0ac26614bd2ae |
| openssh-askpass-gnome-3.9p1-8.RHEL4.17.i386.rpm | d7d1ae6eea1617248a1dd94d5aebfc56 |
| openssh-clients-3.9p1-8.RHEL4.17.i386.rpm | 88055f8b632235cb4f6c041c77426bb7 |
| openssh-server-3.9p1-8.RHEL4.17.i386.rpm | 20e5ab164e2064fef4ee808eeca16e09 |
| IA-64: | |
| openssh-3.9p1-8.RHEL4.17.ia64.rpm | 45422334f78e143b6b2e4594eecdc4a2 |
| openssh-askpass-3.9p1-8.RHEL4.17.ia64.rpm | 97de282c9b352e9c7a939e9797a790c9 |
| openssh-askpass-gnome-3.9p1-8.RHEL4.17.ia64.rpm | 970aae2acb04f46f50d91a525c2c727e |
| openssh-clients-3.9p1-8.RHEL4.17.ia64.rpm | 65265a283172a054b6c66e7e8303dbde |
| openssh-server-3.9p1-8.RHEL4.17.ia64.rpm | 3af550bd7f29dc20a66bf6073f78e838 |
| x86_64: | |
| openssh-3.9p1-8.RHEL4.17.x86_64.rpm | 300fd86cea1f8687f1f48d202e850cb5 |
| openssh-askpass-3.9p1-8.RHEL4.17.x86_64.rpm | 025cfa10b241256c250c2a7bfac3bde3 |
| openssh-askpass-gnome-3.9p1-8.RHEL4.17.x86_64.rpm | 7abd38612b83c438dfc680a5e7c1b5fe |
| openssh-clients-3.9p1-8.RHEL4.17.x86_64.rpm | fd7e4e3239444a616ff2d367a691a9a9 |
| openssh-server-3.9p1-8.RHEL4.17.x86_64.rpm | 24a2f23edd250635204f8ad486ca6920 |
| Red Hat Enterprise Linux WS (v. 3) | |
| SRPMS: | |
| openssh-3.6.1p2-33.30.12.src.rpm | 8210acf1f435ab2035f18be8454293d4 |
| IA-32: | |
| openssh-3.6.1p2-33.30.12.i386.rpm | 89c6a0c942de0f4ad04f9bb025b8b92f |
| openssh-askpass-3.6.1p2-33.30.12.i386.rpm | cfea382c2e368089b0b7ddd734d1b196 |
| openssh-askpass-gnome-3.6.1p2-33.30.12.i386.rpm | 48e8e543f87823d973b5e6b41b206eda |
| openssh-clients-3.6.1p2-33.30.12.i386.rpm | dfd7de84def7466a23f42d7773b7de86 |
| openssh-server-3.6.1p2-33.30.12.i386.rpm | 3ac78136d49fa7a02673f4edc035ffe7 |
| IA-64: | |
| openssh-3.6.1p2-33.30.12.ia64.rpm | 21a62ef6fbf25b1c3551e1d23e7188b4 |
| openssh-askpass-3.6.1p2-33.30.12.ia64.rpm | fbb11f16c2c5ee21b1e3aaec515945e7 |
| openssh-askpass-gnome-3.6.1p2-33.30.12.ia64.rpm | 5da88d2d69c64665788e60b126824bc1 |
| openssh-clients-3.6.1p2-33.30.12.ia64.rpm | 00120331cca393960c1ed8f6be8ce739 |
| openssh-server-3.6.1p2-33.30.12.ia64.rpm | cab6a4b4ce35eadb874c1d33930140d0 |
| x86_64: | |
| openssh-3.6.1p2-33.30.12.x86_64.rpm | 0dfabce4750cd29cf5983c1046abbdf2 |
| openssh-askpass-3.6.1p2-33.30.12.x86_64.rpm | 7ddc9d3c1aaa497e6e9f2ccfeef9ae63 |
| openssh-askpass-gnome-3.6.1p2-33.30.12.x86_64.rpm | 04689df5f2a4df0a6b7cf1358ad456cf |
| openssh-clients-3.6.1p2-33.30.12.x86_64.rpm | e662e6944cc24c928bae0a51850c5776 |
| openssh-server-3.6.1p2-33.30.12.x86_64.rpm | d4f75e6464c79333b96af81171803580 |
| Red Hat Enterprise Linux WS (v. 4) | |
| SRPMS: | |
| openssh-3.9p1-8.RHEL4.17.src.rpm | 51be48086e7c82696796fbf56aa8c71a |
| IA-32: | |
| openssh-3.9p1-8.RHEL4.17.i386.rpm | c3cfd9ebdd59ec90049c011d957ae2f2 |
| openssh-askpass-3.9p1-8.RHEL4.17.i386.rpm | b77a94f1ae3fc9e8e3f0ac26614bd2ae |
| openssh-askpass-gnome-3.9p1-8.RHEL4.17.i386.rpm | d7d1ae6eea1617248a1dd94d5aebfc56 |
| openssh-clients-3.9p1-8.RHEL4.17.i386.rpm | 88055f8b632235cb4f6c041c77426bb7 |
| openssh-server-3.9p1-8.RHEL4.17.i386.rpm | 20e5ab164e2064fef4ee808eeca16e09 |
| IA-64: | |
| openssh-3.9p1-8.RHEL4.17.ia64.rpm | 45422334f78e143b6b2e4594eecdc4a2 |
| openssh-askpass-3.9p1-8.RHEL4.17.ia64.rpm | 97de282c9b352e9c7a939e9797a790c9 |
| openssh-askpass-gnome-3.9p1-8.RHEL4.17.ia64.rpm | 970aae2acb04f46f50d91a525c2c727e |
| openssh-clients-3.9p1-8.RHEL4.17.ia64.rpm | 65265a283172a054b6c66e7e8303dbde |
| openssh-server-3.9p1-8.RHEL4.17.ia64.rpm | 3af550bd7f29dc20a66bf6073f78e838 |
| x86_64: | |
| openssh-3.9p1-8.RHEL4.17.x86_64.rpm | 300fd86cea1f8687f1f48d202e850cb5 |
| openssh-askpass-3.9p1-8.RHEL4.17.x86_64.rpm | 025cfa10b241256c250c2a7bfac3bde3 |
| openssh-askpass-gnome-3.9p1-8.RHEL4.17.x86_64.rpm | 7abd38612b83c438dfc680a5e7c1b5fe |
| openssh-clients-3.9p1-8.RHEL4.17.x86_64.rpm | fd7e4e3239444a616ff2d367a691a9a9 |
| openssh-server-3.9p1-8.RHEL4.17.x86_64.rpm | 24a2f23edd250635204f8ad486ca6920 |
| (The unlinked packages above are only available from the Red Hat Network) | |
解決法:
このアップデートを適用する前に、システムに関連するリリース済の errata が適用済であることをご確認ください。バグジラ: (詳細は、こちらbugzilla[英語]を御覧ください。)
207955 - CVE-2006-4924 openssh DoS
208347 - CVE-2006-5051 unsafe GSSAPI signal handler
参照:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4924
ここに在るパッケージはセキュリティの為、 Red Hat, Inc. によって、 GPG 認証されています。キーは以下から利用可能になっています:
http://www.redhat.com/about/contact.html
各パッケージを確認するには次のコマンドをご利用ください: rpm --checksig filename
各パッケージが壊れていないか、もしくは改ざんされていないかを確認するには、以下のコマンドで MD5 チェックサムをお調べください: rpm --checksig --nogpg filename
注意: GnuPG キーをチェックするためには、RPM 3.0 以上が必要です。