diff options
| author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-05-07 05:37:36 +0000 |
|---|---|---|
| committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-05-07 05:37:36 +0000 |
| commit | 422ab2b33e673a046dc42697f8f1d6faf2df3391 (patch) | |
| tree | ad7ebe5c2d424c1370fd7afe3e8201d5d3d5f9cf /debian/patches/CVE-2023-38408-1.patch | |
| parent | Adding debian version 1:7.9p1-10+deb10u2. (diff) | |
| download | openssh-422ab2b33e673a046dc42697f8f1d6faf2df3391.tar.xz openssh-422ab2b33e673a046dc42697f8f1d6faf2df3391.zip | |
Adding debian version 1:7.9p1-10+deb10u3.debian/1%7.9p1-10+deb10u3
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'debian/patches/CVE-2023-38408-1.patch')
| -rw-r--r-- | debian/patches/CVE-2023-38408-1.patch | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/debian/patches/CVE-2023-38408-1.patch b/debian/patches/CVE-2023-38408-1.patch new file mode 100644 index 0000000..277979f --- /dev/null +++ b/debian/patches/CVE-2023-38408-1.patch @@ -0,0 +1,28 @@ +From 892506b13654301f69f9545f48213fc210e5c5cc Mon Sep 17 00:00:00 2001 +From: "djm@openbsd.org" <djm@openbsd.org> +Date: Wed, 19 Jul 2023 13:55:53 +0000 +Subject: [PATCH] upstream: terminate process if requested to load a PKCS#11 + provider + +that isn't a PKCS#11 provider; from / ok markus@ + +OpenBSD-Commit-ID: 39532cf18b115881bb4cfaee32084497aadfa05c +--- + ssh-pkcs11.c | 8 +++----- + 1 file changed, 3 insertions(+), 5 deletions(-) + +--- a/ssh-pkcs11.c ++++ b/ssh-pkcs11.c +@@ -612,10 +612,8 @@ + error("dlopen %s failed: %s", provider_id, dlerror()); + goto fail; + } +- if ((getfunctionlist = dlsym(handle, "C_GetFunctionList")) == NULL) { +- error("dlsym(C_GetFunctionList) failed: %s", dlerror()); +- goto fail; +- } ++ if ((getfunctionlist = dlsym(handle, "C_GetFunctionList")) == NULL) ++ fatal("dlsym(C_GetFunctionList) failed: %s", dlerror()); + p = xcalloc(1, sizeof(*p)); + p->name = xstrdup(provider_id); + p->handle = handle; |