Názor k článku
Nebezpečná zranitelnost OpenSSH na Linuxu s glibc: regreSSHion od Danny - Zas tak "horsi" to s tim backportem neni...

Zas tak "horsi" to s tim backportem neni - Debian/Bookworm to backportoval do 9.2... a ta aktualizace prisla uz v sobotu vecer.

Ten patch mimochodem prosel i openwallem.... (v debianu sli dal, tam to zarizli uplne; je tam #if 0...).

diff --git a/log.c b/log.c
index 9fc1a2e2e..191ff4a5a 100644
--- a/log.c
+++ b/log.c
@@ -451,12 +451,14 @@ void
 sshsigdie(const char *file, const char *func, int line, int showfunc,
     LogLevel level, const char *suffix, const char *fmt, ...)
 {
+#ifdef SYSLOG_R_SAFE_IN_SIGHAND
    va_list args;

    va_start(args, fmt);
    sshlogv(file, func, line, showfunc, SYSLOG_LEVEL_FATAL,
        suffix, fmt, args);
    va_end(args);
+#endif
    _exit(1);
 }