Bug#1059001: dropbear: CVE-2023-48795

2024-01-24 Thread Guilhem Moulin
Hi, On Tue, 19 Dec 2023 at 09:08:00 +0100, Salvatore Bonaccorso wrote: > The following vulnerability was published for dropbear. > > CVE-2023-48795[0]: > […] > Dropbear commit [1] implements the Strict KEX mode as well. In my > understanding of [2] the issue might be less of a security concern for

Bug#1059001: dropbear: CVE-2023-48795

2023-12-19 Thread Salvatore Bonaccorso
Source: dropbear Version: 2022.83-3 Severity: important Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for dropbear. CVE-2023-48795[0]: | The SSH transport protocol with certain OpenSSH extensions, found in | OpenSSH b