[Git][security-tracker-team/security-tracker][master] LTS: add notes on current status of libssh

[Sean Whitton (@spwhitton)]

Sean Whitton pushed to branch master at Debian Security Tracker / security-tracker


Commits:
73511b68 by Sean Whitton at 2024-02-25T13:50:19+08:00
LTS: add notes on current status of libssh

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -157,7 +157,14 @@ libreswan
 --
 libssh
   NOTE: 20231219: Added by Front-Desk (ta)
-  NOTE: 20240111: Still working on backporting the patches (spwhitton).
+  NOTE: 20240225: Patches backported, tests pass.  The backport should be
+  NOTE: 20240225: reviewed.  I haven't yet tested that Terrapin is actually
+  NOTE: 20240225: mitigated.  Upstream have provided some input on doing that:
+  NOTE: 20240225: <https://archive.libssh.org/libssh/2024-01/0000000.html>.
+  NOTE: 20240225: I've asked upstream whether it's okay to restore the evp
+  NOTE: 20240225: functions and types:
+  NOTE: 20240225: <https://archive.libssh.org/libssh/2024-02/0000007.html>
+  NOTE: 20240225: (spwhitton).
 --
 libstb
   NOTE: 20231029: Added by Front-Desk (gladk)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/73511b68ca05fae82cafcb5c46dcedb5c4698fcc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/73511b68ca05fae82cafcb5c46dcedb5c4698fcc
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240225/35d04117/attachment-0001.htm>