]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
openssh: Whitelist CVE-2021-36368
authorPawan Badganchi <badganchipv@gmail.com>
Mon, 13 Jun 2022 13:48:15 +0000 (19:18 +0530)
committerSteve Sakoman <steve@sakoman.com>
Mon, 13 Jun 2022 16:21:32 +0000 (06:21 -1000)
commit179b862e97d95ef57f8ee847e54a78b5f3f52ee7
tree243271f578bc27a13c9120bc71987701f6b8f75b
parentcc657868d31cc8b4218a07aa10fa098c379e473c
openssh: Whitelist CVE-2021-36368

As per debian, the issue is fixed by a feature called
"agent restriction" in openssh 8.9.
Urgency is unimportant as per debian, Hence this CVE is whitelisting.
Link:
https://security-tracker.debian.org/tracker/CVE-2021-36368
https://bugzilla.mindrot.org/show_bug.cgi?id=3316#c2
https://docs.ssh-mitm.at/trivialauth.html

Signed-off-by: Pawan Badganchi <badganchipv@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-connectivity/openssh/openssh_8.2p1.bb