ubuntu/+source/openssh:applied/debian/bookworm

Last commit made on 2024-02-10
Get this branch:
git clone -b applied/debian/bookworm https://git.launchpad.net/ubuntu/+source/openssh
Members of git-ubuntu import can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
applied/debian/bookworm
Repository:
lp:ubuntu/+source/openssh

Recent commits

9fbff31... by Colin Watson

1:9.2p1-2+deb12u2 (patches applied)

Imported using git-ubuntu import.

d6673cd... by Colin Watson

upstream: ban user/hostnames with most shell metacharacters

Gbp-Pq: CVE-2023-51385.patch.

2366a53... by Colin Watson

upstream: apply destination constraints to all p11 keys

Gbp-Pq: CVE-2023-51384.patch.

25d87f2... by Colin Watson

upstream: implement "strict key exchange" in ssh and sshd

Gbp-Pq: CVE-2023-48795.patch.

9657b61... by Colin Watson

upstream: include destination constraints for smartcard keys too.

Gbp-Pq: CVE-2023-28531.patch.

69200c7... by Colin Watson

upstream: Ensure FIDO/PKCS11 libraries contain expected symbols

Gbp-Pq: CVE-2023-38408-3.patch.

a4b0b9e... by Colin Watson

disallow remote addition of FIDO/PKCS11 keys

Gbp-Pq: CVE-2023-38408-2.patch.

90df955... by Colin Watson

terminate pkcs11 process for bad libraries

Gbp-Pq: CVE-2023-38408-1.patch.

a78105b... by Colin Watson

Remove spurious ssh-agent options

Gbp-Pq: remove-spurious-ssh-agent-options.patch.

2ae62d0... by Colin Watson

Support systemd socket activation

Gbp-Pq: systemd-socket-activation.patch.