Thanks for the heads-up.
I have added OpenSSH 9.6p1 to the Chicory collection.
Sadly, I don't have a z/OS build system for that collection. (And if
anyone can offer such, please pardon my sound-byte responses up to now.)
Had to bump-up the minimum level of OpenSSL from 1.0.2 to 1.1.1.
It builds and links against OpenSSL 1.1.1t and LibreSSL 3.8.1. Not sure
their rejection of 1.0.2 is justified, but it's the current religion.
-- R; <><
On 1/5/24 07:50, rpinion865 wrote:
Does anyone know if the z/OS implementation of ssh is vulnerable to
CVE-2023048795? I tried searching
for z/OS and OpenSSH (CVE-2023-48795). But, I did not get any hits specific to
z/OS. Thanks in advance.
Cross posting to IBMTCP-L and IBM Main
Sent with [Proton Mail](https://proton.me/) secure email.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN