Backport fix for CVE-2024-6387 (#2294879) Backport fix for ObscureKeystrokeTiming logic error from OpenSSH 9.8
Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
sudo dnf upgrade --refresh --advisory=FEDORA-2024-dc89a2e1bfPlease log in to add feedback.
| 0 | 4 | Test Case OpenSSH |
This update has been submitted for testing by dbelyavs.
This update's test gating status has been changed to 'waiting'.
Thanks! Is f40.4 expected package name here?
Works without problems. I also wonder about the release numbering. I would have expected 5.fc40 instead of 1.fc40.4 . It seams to me that only openssh uses this numbering schema.
This update's test gating status has been changed to 'passed'.
This update has been submitted for stable by bodhi.
The numbering scheme is fine and supported. Increasing the number after the
%{dist}tag ensures a clean upgrade path from1.fc40to1.fc41. This wasn't necessary here, since we will likely not ship9.6p1-1.fc41in F41, but I don't think this warrants another rebuild for this important fix.Works fine here on a QEMU-based VM and a physical machine.
lightly tested on a VM, seems perfectly fine I can't test the bugs this release fixes...
This update has been pushed to stable.