Publishing details
Changelog
openssh (1:8.9p1-3ubuntu0.3) jammy-security; urgency=medium
* SECURITY UPDATE: remote code execution relating to PKCS#11 providers
- debian/patches/CVE-2023-38408-1.patch: terminate process if requested
to load a PKCS#11 provider that isn't a PKCS#11 provider in
ssh-pkcs11.c.
- debian/patches/CVE-2023-38408-2.patch: disallow remote addition of
FIDO/PKCS11 provider in ssh-agent.1, ssh-agent.c.
- debian/patches/CVE-2023-38408-3.patch: ensure FIDO/PKCS11 libraries
contain expected symbols in misc.c, misc.h, ssh-pkcs11.c, ssh-sk.c.
- CVE-2023-38408
-- Marc Deslauriers <email address hidden> Wed, 19 Jul 2023 15:41:52 -0400
Builds
Built packages
-
openssh-client
secure shell (SSH) client, for secure access to remote machines
-
openssh-client-dbgsym
debug symbols for openssh-client
-
openssh-server
secure shell (SSH) server, for secure access from remote machines
-
openssh-server-dbgsym
debug symbols for openssh-server
-
openssh-sftp-server
secure shell (SSH) sftp server module, for SFTP access from remote machines
-
openssh-sftp-server-dbgsym
debug symbols for openssh-sftp-server
-
openssh-tests
OpenSSH regression tests
-
openssh-tests-dbgsym
debug symbols for openssh-tests
-
ssh
secure shell client and server (metapackage)
-
ssh-askpass-gnome
interactive X program to prompt users for a passphrase for ssh-add
-
ssh-askpass-gnome-dbgsym
debug symbols for ssh-askpass-gnome
Package files