Mailing List Archive: [Bug 3594] PKCS11Provider now requires full paths

[Bug 3594] PKCS11Provider now requires full paths

Jul 27, 2023, 4:36 PM

Post #1 of 3 (127 views)

https://bugzilla.mindrot.org/show_bug.cgi?id=3594

Damien Miller <djm@mindrot.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |WONTFIX
Status|NEW |RESOLVED
CC| |djm@mindrot.org

--- Comment #1 from Damien Miller <djm@mindrot.org> ---
This is intentional, sorry.

--
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs

[Bug 3594] PKCS11Provider now requires full paths [ In reply to ]

bugzilla-daemon at mindrot

Jul 27, 2023, 5:06 PM

Post #2 of 3 (127 views)

Permalink

https://bugzilla.mindrot.org/show_bug.cgi?id=3594

--- Comment #2 from Damien Miller <djm@mindrot.org> ---
I should add that the change that causes this has not been released
yet. It will be part of OpenSSH 9.4 which is due pretty soon. I guess
somebody has mistakenly cherry-picked it somewhere? It is not required
to fix CVE-2023-38408 (only 892506b1365430 - the fatal() change is
needed); it's more defence in depth.

--
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs

[Bug 3594] PKCS11Provider now requires full paths [ In reply to ]

bugzilla-daemon at mindrot

Jul 28, 2023, 4:22 AM

Post #3 of 3 (127 views)

Permalink

https://bugzilla.mindrot.org/show_bug.cgi?id=3594

--- Comment #3 from Marc Deslauriers <marc.deslauriers@canonical.com> ---
Yes, I cherry picked that commit when fixing Ubuntu.

Thanks for your response, I just wanted to make sure this change was
intentional.

--
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs