Bug#1059393: ABACuS arXiv.2310.09977

Boud Roukema <[email protected]>
Newsgroups gmane.linux.debian.devel.ssh
Message-ID <634462b5-571c-87ce-db5f-51838358be49__29924.5766060025$1703589334$gmane$org@cosmo.torun.pl>
hi openssh maintainers,

There's a proposed mitigation for CVE-2023-51767 with ABACuS:

https://arxiv.org/abs/2310.09977

https://github.com/CMU-SAFARI/ABACuS

Something on this should probably be added to the "Notes" at
https://security-tracker.debian.org/tracker/CVE-2023-51767 .

Disclaimer: I just saw the citation - I have no expertise in checking
the validity of the exploit or the mitigation.

Cheers
Boud

PS: Conspiracy theory (numerology): this bug number is 105000 +
101*93, while the ArXiv ID after YYMM is 101*97. Common to
both is 101*p where p is a prime and p < 100 . ;)
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.