From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id QHJANeuogmZvGgAAe85BDQ:P1 (envelope-from ) for ; Mon, 01 Jul 2024 13:02:36 +0000 Received: from aspmx1.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2.migadu.com with LMTPS id QHJANeuogmZvGgAAe85BDQ (envelope-from ) for ; Mon, 01 Jul 2024 15:02:35 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=dismail.de header.s=20190914 header.b=DPdZHAyp; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=reject) header.from=dismail.de ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1719838953; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=MLqJALVbnnpiPyMxt5H3nIzIhWMtWBtUij9J4pt5p3U=; b=qUHa4ko3HssghcZ6XReUFYb9MxYYwvx3GwjhnHWrwX9tOaUfFb1ZlkUsU2zIby2sw273a5 CfWYui/UdKttWmlZ10WopoOSnq4ihJkuK8EtM639Ozf6hNCibnKny6Uy+F/XyQ/4HBibD8 BEX0P9jBXVrpz4pu8t93j7XG+foH5bu8KwCxjWEIlBIiKKZ70WsoWg/fe9A4rpXJxhBqtJ pYAgCLfFAWyyfuwHxjIiNxqw38s5wxS3p8slbAwEbF/lggWOEGbHK9qV16fmDDSbJJd86+ 4wSAIYa/bChu10goWjnheSLNZqM6R0vhghqi3kHJy+N9GJXhUx0uqd4HVdwPaQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=dismail.de header.s=20190914 header.b=DPdZHAyp; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=reject) header.from=dismail.de ARC-Seal: i=1; s=key1; d=yhetil.org; t=1719838953; a=rsa-sha256; cv=none; b=mTWBNgYYeTUJakS8D/t4V66D5IdAKIM/zPibrV2xclbM4dZKgROh+Zf/7KPwUuZrzOYHTR vv9eK4SiwUByWbyo7vgL02XdX8nIvTNVGaUI3/9oCsK/eqmui2p6++Nnln3VJ9925sGp5W u0Jh852xSdhZZhZXDXOV2phdNdLAhE+kHjkBuP6us+GGYNOLGDUn8/KqPiUdf/iu5tPprp zxdwXghkPZbHQHnlaheUnp805ZUASvzvzhWCXvTmmw3lagHSuLKsF99auOPcY5TOxaimxF XjONx6MX7RmAgeYiHd9XhPTo39dWHbL0+Gkmq7leLlcBjF12lxbTFYVuBwssXg== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 4CA4665422 for ; Mon, 1 Jul 2024 15:02:33 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1sOGf9-0003g4-Ng; Mon, 01 Jul 2024 09:01:43 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sOGf5-0003cO-3Q; Mon, 01 Jul 2024 09:01:39 -0400 Received: from mx1.dismail.de ([78.46.223.134]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sOGf2-000482-Cq; Mon, 01 Jul 2024 09:01:38 -0400 Received: from mx1.dismail.de (localhost [127.0.0.1]) by mx1.dismail.de (OpenSMTPD) with ESMTP id 0b6b2089; Mon, 1 Jul 2024 15:01:29 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=dismail.de; h= mime-version:date:content-type:content-transfer-encoding:from :message-id:subject:to; s=20190914; bh=MLqJALVbnnpiPyMxt5H3nIzIh WMtWBtUij9J4pt5p3U=; b=DPdZHAypYtHT3zT3L5eIwz7HlN7U5M1W5rrUY+cYU hxLifYhN/CW9D9TIzk/mAM3kclAVZ0eAxOk++yK1VJlFm1xOMrV5QZFCmSfiahJ9 mBtRU/3YkaIGC5QkydFIzmZ0i829kD9vAykDtctvEqW/YL8+Su7z0jVyij14X7Yv uvT8Is8NRt+AteK5wN7GmQmZnhEFsQ6ZvBq1TT2XsJul1nuAVscJbjii2JAO+VjS yiNS8NqW+ZhjqktI/xwlQeDqs1uQ+Xh0FQL1QZHPEAM/roQ/vvLgGRzSb2zr8iML ZAhqx0tV+VRbF0P+suz8Y7O/E/L4M7qRdSdt+FZz4e+TA== Received: from smtp2.dismail.de ( [10.240.26.12]) by mx1.dismail.de (OpenSMTPD) with ESMTP id 438095d9; Mon, 1 Jul 2024 15:01:29 +0200 (CEST) Received: from smtp2.dismail.de (localhost [127.0.0.1]) by smtp2.dismail.de (OpenSMTPD) with ESMTP id 21cc5173; Mon, 1 Jul 2024 15:01:29 +0200 (CEST) Received: by dismail.de (OpenSMTPD) with ESMTPSA id 35b8867f (TLSv1.3:TLS_AES_256_GCM_SHA384:256:NO); Mon, 1 Jul 2024 15:01:28 +0200 (CEST) MIME-Version: 1.0 Date: Mon, 01 Jul 2024 13:01:28 +0000 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: jbranso@dismail.de Message-ID: <95b35e90f9a6cf47ea717a91a983385c795ce031@dismail.de> TLS-Required: No Subject: Have ya'll seen the news about the openssh vulnerablity? To: guix-security@gnu.org, guix-devel@gnu.org Received-SPF: pass client-ip=78.46.223.134; envelope-from=jbranso@dismail.de; helo=mx1.dismail.de X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Migadu-Queue-Id: 4CA4665422 X-Migadu-Scanner: mx13.migadu.com X-Migadu-Spam-Score: -7.33 X-Spam-Score: -7.33 X-TUID: nw96k/jdY8cN Heyo, Have you all seen this new openssh vulnerability? Is guix affected? https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regres= shion-remote-unauthenticated-code-execution-vulnerability-in-openssh-serv= er Thanks, Joshua