Bug#891854: stretch-pu: package openssh/1:7.4p1-10+deb9u3
Control: tags -1 + pending
On Sat, 2018-03-03 at 11:19 +0000, Colin Watson wrote:
> On Sat, Mar 03, 2018 at 11:29:12AM +0100, Cyril Brulebois wrote:
> > Adam D. Barratt <adam@adam-barratt.org.uk> (2018-03-03):
> > > On Thu, 2018-03-01 at 16:20 +0000, Colin Watson wrote:
> > > > I'd like to fix openssh CVE-2017-15906 in stretch. A debdiff
> > > > follows.
> > > > It's somewhat difficult to test because you first have to
> > > > reconfigure
> > > > the Subsystem line in /etc/ssh/sshd_config to add the -R option
> > > > to
> > > > sftp-server, and then you have to construct a somewhat weird
> > > > request,
> > > > but I managed to do it locally.
> > >
> > > This looks OK to me, but would need a KiBi-ack due to the udeb;
> > > CCing
> > > accordingly.
> >
> > Sure, that's fine.
>
> Thanks; uploaded.
Flagged for acceptance into p-u; thanks.
Regards,
Adam
Reply to: