开源软件构建与测试

_service:tar_scm:openssh.spec Changed

@@ -6,7 +6,7 @@
 %{?no_gtk2:%global gtk2 0}
 
 %global sshd_uid    74
-%global openssh_release 3
+%global openssh_release 4
 
 Name:           openssh
 Version:        9.3p2
@@ -99,6 +99,7 @@
 Patch77:        set-ssh-config.patch
 Patch78:        backport-CVE-2023-48795-upstream-implement-strict-key-exchange-in-ssh-and-ss.patch
 Patch79:        backport-CVE-2023-51385-upstream-ban-user-hostnames-with-most-shell-metachar.patch
+Patch80:        backport-fix-CVE-2024-6387.patch
 
 Requires:       /sbin/nologin
 Requires:       libselinux >= 2.3-5 audit-libs >= 1.0.8
@@ -247,6 +248,7 @@
 %patch77 -p1
 %patch78 -p1
 %patch79 -p1
+%patch80 -p1
 
 autoreconf
 pushd pam_ssh_agent_auth-pam_ssh_agent_auth-0.10.4
@@ -463,6 +465,12 @@
 %attr(0644,root,root) %{_mandir}/man8/sftp-server.8*
 
 %changelog
+* Tue Jul 2 2024 renmingshuai <renmingshuai@huawei.com> - 9.3p2-4
+- Type:CVE
+- CVE:CVE-2024-6387
+- SUG:NA
+- DESC:Fix CVE-2024-6387
+
 * Mon Apr 29 2024 renmingshuai <renmingshuai@huawei.com> - 9.3p2-3
 - Type:bugfix
 - CVE:

_service:tar_scm:backport-fix-CVE-2024-6387.patch Added

_service Changed

Changes of Revision 2