id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
20027	openssh-9.8p1	Xi Ruoyao	Bruce Dubbs	"New minor version.

> A critical vulnerability in sshd(8) was present in Portable OpenSSH
> versions 8.5p1 and 9.7p1 (inclusive) that may allow arbitrary code
> execution with root privileges.

> Successful exploitation has been demonstrated on 32-bit Linux/glibc
> systems with ASLR. Under lab conditions, the attack requires on
> average 6-8 hours of continuous connections up to the maximum the
> server will accept. Exploitation on 64-bit systems is believed to be
> possible but has not been demonstrated at this time. It's likely that
> these attacks will be improved upon.

**We should upgrade rivendell and anduin ASAP.**"	enhancement	closed	high	12.2	Errata	git	medium	fixed