File _patchinfo of Package patchinfo.295
<patchinfo incident="295">
<issue id="856316" tracker="bnc">FIPS: openssh tracker bug</issue>
<issue id="912436" tracker="bnc">regression due to urandom reseeding</issue>
<issue id="855676" tracker="bnc">FIPS: openssh tracker bug</issue>
<category>recommended</category>
<rating>moderate</rating>
<packager>pcerny</packager>
<description>
This update adjusts various parts of openssh (paramaters and available
cipher lists) in regards to FIPS certification.
Adjustments done:
- Some Key exchange modifications were done for FIPS, removing
algorithms no longer allowed in FIPS mode.
- Only use Diffie Hellmann groups with 2048 bits or more in FIPS mode.
- Allow "stat" call in seccomp sandbox due to reseeding changes in openssl.
</description>
<summary>Recommended update for openssh</summary>
</patchinfo>