[Bug 3479] New: ssh-keygen does not honor DST daylight savings time when signing certifying a public key

2022-10-03 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=3479 Bug ID: 3479 Summary: ssh-keygen does not honor DST daylight savings time when signing certifying a public key Product: Portable OpenSSH Version: 7.4p1 Hardware: Other

[Bug 3478] Default "kill" action of seccomp sandbox is fragile

2022-10-03 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=3478 --- Comment #3 from Darren Tucker --- (In reply to Colin Watson from comment #2) > (In reply to Darren Tucker from comment #1) > > [...]security vulnerabilities > > I don't think this is _not_ an issue, and I agree it requires care - > that's

[Bug 3478] Default "kill" action of seccomp sandbox is fragile

2022-10-03 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=3478 Darren Tucker changed: What|Removed |Added CC||dtuc...@dtucker.net --- Comment #1 from

[Bug 3478] Default "kill" action of seccomp sandbox is fragile

2022-10-03 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=3478 --- Comment #2 from Colin Watson --- (In reply to Darren Tucker from comment #1) > Arbitrarily failing syscalls that do not normally fail has been the > source of serious security vulnerabilities in the past (eg > CVE-2000-0506). That's why the