Bug#831902: openssh: CVE-2016-6210: User enumeration via covert timing channel

2016-07-20 Thread Salvatore Bonaccorso
Source: openssh Version: 1:7.2p2-5 Severity: important Tags: security upstream patch Hi, the following vulnerability was published for openssh. CVE-2016-6210[0]: User enumeration via covert timing channel If you fix the vulnerability please also make sure to include the CVE (Common

Wheezy update of openssh?

2016-07-20 Thread Chris Lamb
Hello dear maintainer(s), the Debian LTS team would like to fix the security issues which are currently open in the Wheezy version of openssh: https://security-tracker.debian.org/tracker/CVE-2016-6210 Would you like to take care of this yourself? If yes, please follow the workflow we have