Overview

Request 1141980 accepted

- update to 20240101 (bsc#1218197, CVE-2023-48795):
* fixed channel_forkpty() race condition between close(slave)
in parent process and login_tty(slave) in child process
* fixed behavior when using terminal mode and stdin redirected
to /dev/null 'ssh -tt -n'
* added an 'strict-key' key exchange kex-strict-
s-v00@openssh.com (Mitigates CVE-2023-48795 "Terrapin
attack")

* updated crypto/crypto_onetimeauth_poly1305.c

Loading...
Request History
Dirk Mueller's avatar

dirkmueller created request

- update to 20240101 (bsc#1218197, CVE-2023-48795):
* fixed channel_forkpty() race condition between close(slave)
in parent process and login_tty(slave) in child process
* fixed behavior when using terminal mode and stdin redirected
to /dev/null 'ssh -tt -n'
* added an 'strict-key' key exchange kex-strict-
s-v00@openssh.com (Mitigates CVE-2023-48795 "Terrapin
attack")

* updated crypto/crypto_onetimeauth_poly1305.c


Factory Auto's avatar

factory-auto added origin-reviewers as a reviewer

Please review sources


Factory Auto's avatar

factory-auto accepted review

Check script succeeded


Saul Goodman's avatar

licensedigger accepted review

ok


Yuchen Lin's avatar

maxlin_factory added as a reviewer

Being evaluated by staging project "openSUSE:Backports:SLE-15-SP6:Staging:adi:15"


Yuchen Lin's avatar

maxlin_factory accepted review

Picked "openSUSE:Backports:SLE-15-SP6:Staging:adi:15"


Max Lin's avatar

mlin7442 accepted review


Yuchen Lin's avatar

maxlin_factory accepted review

Staging Project openSUSE:Backports:SLE-15-SP6:Staging:adi:15 got accepted.


Yuchen Lin's avatar

maxlin_factory approved review

Staging Project openSUSE:Backports:SLE-15-SP6:Staging:adi:15 got accepted.


Yuchen Lin's avatar

maxlin_factory accepted request

Staging Project openSUSE:Backports:SLE-15-SP6:Staging:adi:15 got accepted.

openSUSE Build Service is sponsored by