-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 19 Jul 2023 22:49:14 +0100
Source: openssh
Architecture: source
Version: 1:9.3p2-1
Distribution: unstable
Urgency: high
Maintainer: Debian OpenSSH Maintainers <debian-ssh@lists.debian.org>
Changed-By: Colin Watson <cjwatson@debian.org>
Changes:
openssh (1:9.3p2-1) unstable; urgency=high
.
* New upstream release (https://www.openssh.com/releasenotes.html#9.3p2):
- [CVE-2023-38408] Fix a condition where specific libraries loaded via
ssh-agent(1)'s PKCS#11 support could be abused to achieve remote code
execution via a forwarded agent socket.
Checksums-Sha1:
fa2a445fe90fdcad97ac0b5def8644eecd92cf16 3312 openssh_9.3p2-1.dsc
219cf700c317f400bb20b001c0406056f7188ea4 1835850 openssh_9.3p2.orig.tar.gz
03fa186a3c75f7feff5877dfe3c9335bef39630d 833 openssh_9.3p2.orig.tar.gz.asc
f8d8c9fb71198a022278888d533470c3bd4848e1 183808 openssh_9.3p2-1.debian.tar.xz
Checksums-Sha256:
d105d0ebf0f3b52c19511f0fe5079fe3928d4ea3dadd58d6689b0c0f5d5b4c67 3312 openssh_9.3p2-1.dsc
200ebe147f6cb3f101fd0cdf9e02442af7ddca298dffd9f456878e7ccac676e8 1835850 openssh_9.3p2.orig.tar.gz
1296c444239811c61403d99734d4536c822ebf4dfc16718209e1b9a35f657672 833 openssh_9.3p2.orig.tar.gz.asc
197a2581e5737b60f47b07daeaa37511bc1ec40e0a0284683a927e173ee15c95 183808 openssh_9.3p2-1.debian.tar.xz
Files:
4dee5f46fced2c5bd10ffd153c1a854a 3312 net standard openssh_9.3p2-1.dsc
e21180e7c902e596b047b5520842c2e1 1835850 net standard openssh_9.3p2.orig.tar.gz
b27182674e099590df420a8c6089de4b 833 net standard openssh_9.3p2.orig.tar.gz.asc
874c1de8ebe22ac85dfb2ff41604461b 183808 net standard openssh_9.3p2-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=NoVC
-----END PGP SIGNATURE-----
