Bug#891854: stretch-pu: package openssh/1:7.4p1-10+deb9u3

[Colin Watson <cjwatson@debian.org>]

On Sat, Mar 03, 2018 at 11:29:12AM +0100, Cyril Brulebois wrote:
> Adam D. Barratt <adam@adam-barratt.org.uk> (2018-03-03):
> > On Thu, 2018-03-01 at 16:20 +0000, Colin Watson wrote:
> > > I'd like to fix openssh CVE-2017-15906 in stretch.  A debdiff
> > > follows.
> > > It's somewhat difficult to test because you first have to reconfigure
> > > the Subsystem line in /etc/ssh/sshd_config to add the -R option to
> > > sftp-server, and then you have to construct a somewhat weird request,
> > > but I managed to do it locally.
> > 
> > This looks OK to me, but would need a KiBi-ack due to the udeb; CCing
> > accordingly.
> 
> Sure, that's fine.

Thanks; uploaded.

-- 
Colin Watson                                       [cjwatson@debian.org]