This commit is contained in:
djm 2023-07-19 15:04:35 +00:00
parent 079366788e
commit 103c5d025d
1 changed files with 5 additions and 5 deletions

View File

@ -48,10 +48,10 @@ Fix CVE-2023-38408 - a condition where specific libaries loaded via
code execution via a forwarded agent socket if the following
conditions are met:
* Exploitation requires the presence of specific libraries on
  the victim system.
* Remote exploitation requires that the agent was forwarded
  to an attacker-controlled system.
* Exploitation requires the presence of specific libraries on
the victim system.
* Remote exploitation requires that the agent was forwarded
to an attacker-controlled system.
Exploitation can also be prevented by starting <a href='https://man.openbsd.org/ssh-agent.1'>ssh-agent(1)</a> with an
empty PKCS#11/FIDO allowlist (ssh-agent -P '') or by configuring
@ -11700,4 +11700,4 @@ Damien Miller
[1] <a href='http://violet.ibs.com.au/openssh/files/ChangeLog'>http://violet.ibs.com.au/openssh/files/ChangeLog</a>
</pre><hr>
<p>$OpenBSD: releasenotes.html,v 1.62 2023/07/19 14:17:44 djm Exp $
<p>$OpenBSD: releasenotes.html,v 1.63 2023/07/19 15:04:35 djm Exp $