[El-errata] ELSA-2016-2588 Moderate: Oracle Linux 7 openssh security, bug fix, and enhancement update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2016-2588

http://linux.oracle.com/errata/ELSA-2016-2588.html

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
openssh-6.6.1p1-31.el7.x86_64.rpm
openssh-askpass-6.6.1p1-31.el7.x86_64.rpm
openssh-clients-6.6.1p1-31.el7.x86_64.rpm
openssh-keycat-6.6.1p1-31.el7.x86_64.rpm
openssh-ldap-6.6.1p1-31.el7.x86_64.rpm
openssh-server-6.6.1p1-31.el7.x86_64.rpm
openssh-server-sysvinit-6.6.1p1-31.el7.x86_64.rpm
pam_ssh_agent_auth-0.9.3-9.31.el7.i686.rpm
pam_ssh_agent_auth-0.9.3-9.31.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/openssh-6.6.1p1-31.el7.src.rpm



Description of changes:

[6.6.1p1-31 + 0.9.3-9]
- Do not depend on selinux-policy (#1373297)

[6.6.1p1-30 + 0.9.3-9]
- Drop dependency on libcap-ng for ssh-keycat (#1357859)

[6.6.1p1-29 + 0.9.3-9]
- Rework SELinux context handling with chroot using libcap-ng (#1357859)

[6.6.1p1-28 + 0.9.3-9]
- SFTP force permission collision with umask (#1344614)
- Make closefrom() ignore FD's to /dev/ devices on s390 (#1318760)
- Create a default value for AuthenticationMethods any (#1237129)
- Fix ssh-copy-id with LogLevel=quiet (#1349556)
- Expose more information to PAM (#1312304)
- Move MAX_DISPLAYS to a configuration option (#1341302)
- Add a wildcard option to PermitOpen directive (host) (#1344106)

[6.6.1p1-27 + 0.9.3-9]
- Coverity and RPMDiff build issues (#1334326)
- CVE-2015-8325: privilege escalation via user's PAM environment and 
UseLogin=yes (#1329191)
- Check for real location of .k5login file (#1328243)
- close ControlPersist background process stderr (#1335540)

[6.6.1p1-26 + 0.9.3-9]
- Drop glob patch for sftp client preventing listing many files (#1310303)
- Fix race condition between audit messages from different processes 
(#1310684)
- Make systemd service forking to properly report state (#1291172)
- Get rid of rpm triggers for openssh-5.x (#1312013)
- Generate the host keys when the key files are empty (#1266043)
- pam_ssh_agent_auth: authorized_keys_command option (#1317858)
- Don't use MD5 digest from pam_ssh_agent_auth in FIPS mode (#1317952)