Bug#1058624: CVE-2023-5616: if sshd is enabled but socket-activated, control-center will say it's disabled

Jeremy Bícha jeremy.bicha at canonical.com
Wed Dec 13 21:29:28 GMT 2023


On Wed, Dec 13, 2023 at 1:15 PM Simon McVittie <smcv at debian.org> wrote:
> Ubuntu have treated this as a security issue, on the basis that users
> who have been misinformed about the status of remote login might make
> security-sensitive assumptions that are, in fact, untrue. I'm not really
> convinced that this is a serious security issue, and Ubuntu seem to
> have been treating this as an Ubuntu-specific thing rather than talking
> to upstream about it, so I've reported it here as important rather
> than grave.

Technically, Robert Ancell is also an upstream maintainer.

Thank you,
Jeremy Bícha



More information about the pkg-gnome-maintainers mailing list