Publishing details
Changelog
openssh (1:9.3p1-1ubuntu3.2) mantic-security; urgency=medium
* SECURITY UPDATE: incomplete PKCS#11 destination constraints
- debian/patches/CVE-2023-51384.patch: apply destination constraints to
all p11 keys in ssh-agent.c.
- CVE-2023-51384
* SECURITY UPDATE: command injection via shell metacharacters
- debian/patches/CVE-2023-51385.patch: ban user/hostnames with most
shell metacharacters in ssh.c.
- CVE-2023-51385
-- Marc Deslauriers <email address hidden> Tue, 02 Jan 2024 11:33:40 -0500
Builds
Built packages
-
openssh-client
secure shell (SSH) client, for secure access to remote machines
-
openssh-client-dbgsym
debug symbols for openssh-client
-
openssh-server
secure shell (SSH) server, for secure access from remote machines
-
openssh-server-dbgsym
debug symbols for openssh-server
-
openssh-sftp-server
secure shell (SSH) sftp server module, for SFTP access from remote machines
-
openssh-sftp-server-dbgsym
debug symbols for openssh-sftp-server
-
openssh-tests
OpenSSH regression tests
-
openssh-tests-dbgsym
debug symbols for openssh-tests
-
ssh
secure shell client and server (metapackage)
-
ssh-askpass-gnome
interactive X program to prompt users for a passphrase for ssh-add
-
ssh-askpass-gnome-dbgsym
debug symbols for ssh-askpass-gnome
Package files