Bug#891854: stretch-pu: package openssh/1:7.4p1-10+deb9u3

["Adam D. Barratt" <adam@adam-barratt.org.uk>]

Control: tags -1 + moreinfo d-i

On Thu, 2018-03-01 at 16:20 +0000, Colin Watson wrote:
> I'd like to fix openssh CVE-2017-15906 in stretch.  A debdiff
> follows.
> It's somewhat difficult to test because you first have to reconfigure
> the Subsystem line in /etc/ssh/sshd_config to add the -R option to
> sftp-server, and then you have to construct a somewhat weird request,
> but I managed to do it locally.
> 

This looks OK to me, but would need a KiBi-ack due to the udeb; CCing
accordingly.

Regards,

Adam