Skip to content
This repository has been archived by the owner on Jan 27, 2023. It is now read-only.

False positive against openssh*-7.4p1-22.0.1.el7_9_fips #1357

Open
prabhakarp-dev opened this issue Jan 19, 2022 · 0 comments
Open

False positive against openssh*-7.4p1-22.0.1.el7_9_fips #1357

prabhakarp-dev opened this issue Jan 19, 2022 · 0 comments

Comments

@prabhakarp-dev
Copy link

Similar to closed issue #1237 for openssl on OL8, there are actually two versions of openssh for Oracle Linux 7; the latest versions are:

  • vanilla: openssh*-7.4p1-22.0.1.el7_9
  • FIPS-validated for special environments: openssh*-7.4p1-22.0.1.el7_9_fips

Logic is needed to differentiate these; only the ELSA advisories for the already-installed flavor should be checked. The FIPS version of openssh has "_fips" suffixed to the version string.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant