Bug#1059393: ABACuS arXiv.2310.09977
Boud Roukema <[email protected]>
| Newsgroups | gmane.linux.debian.devel.ssh |
|---|---|
| Message-ID | <634462b5-571c-87ce-db5f-51838358be49__29924.5766060025$1703589334$gmane$org@cosmo.torun.pl> |
hi openssh maintainers, There's a proposed mitigation for CVE-2023-51767 with ABACuS: https://arxiv.org/abs/2310.09977 https://github.com/CMU-SAFARI/ABACuS Something on this should probably be added to the "Notes" at https://security-tracker.debian.org/tracker/CVE-2023-51767 . Disclaimer: I just saw the citation - I have no expertise in checking the validity of the exploit or the mitigation. Cheers Boud PS: Conspiracy theory (numerology): this bug number is 105000 + 101*93, while the ArXiv ID after YYMM is 101*97. Common to both is 101*p where p is a prime and p < 100 . ;)