jammy-openssh-cve-2023-38408 : lp:~ahasenack/ubuntu/+source/openssh : Git : Code : openssh package : Ubuntu

Get this branch:: git clone -b jammy-openssh-cve-2023-38408 https://git.launchpad.net/~ahasenack/ubuntu/+source/openssh

Only Andreas Hasenack can upload to this branch. If you are Andreas Hasenack please log in for upload directions.

Branch merges

Branch information

Name:: jammy-openssh-cve-2023-38408

Repository:: lp:~ahasenack/ubuntu/+source/openssh

Recent commits

73606ac... by Andreas Hasenack on 2023-07-19

changelog

a1334e2... by Andreas Hasenack on 2023-07-19

  * SECURITY UPDATE: remote code execution relating to PKCS#11 providers
    - debian/patches/CVE-2023-38408-1.patch: terminate process if requested
      to load a PKCS#11 provider in ssh-pkcs11.c.
    - debian/patches/CVE-2023-38408-2.patch: disallow remote addition of
      FIDO/PKCS11 provider in ssh-agent.1, ssh-agent.c.
    - debian/patches/CVE-2023-38408-3.patch: ensure FIDO/PKCS11 libraries
      contain expected symbols in misc.c, misc.h, ssh-pkcs11.c, ssh-sk.c.
    - debian/patches/CVE-2023-38408-4.patch: separate ssh-pkcs11-helpers
      for each p11 module in ssh-pkcs11-client.c.
    - CVE-2023-38408

0d1dd76... by Bryce Harrington on 2022-11-23