From 2793e0783a00362d6de32168d00c545334adea0ad3e6322c6b03f65f72221900 Mon Sep 17 00:00:00 2001 From: Antonio Larrosa Date: Mon, 8 Apr 2024 11:15:17 +0000 Subject: [PATCH] Accepting request 1166156 from home:alarrosa:branches:network Add one more bsc/CVE reference OBS-URL: https://build.opensuse.org/request/show/1166156 OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=261 --- openssh.changes | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/openssh.changes b/openssh.changes index d763c5a..2f4e28b 100644 --- a/openssh.changes +++ b/openssh.changes @@ -50,7 +50,8 @@ Sun Feb 25 18:26:23 UTC 2024 - Hans Petter Jansson protocol by sending extra messages prior to the commencement of encryption, and deleting an equal number of consecutive messages immediately after encryption starts. A peer SSH client/server - would not be able to detect that messages were deleted. + would not be able to detect that messages were deleted + (bsc#1217950, CVE-2023-48795). * ssh-agent(1): when adding PKCS#11-hosted private keys while specifying destination constraints, if the PKCS#11 token returned multiple keys then only the first key had the constraints applied.