# changelog

author: Solar Designer <solar@openwall.com> 8.7p1-34.3.el9_3.security.0.2
changelog:
  - Rebase 8.7p1-34.el9_3.security.0.1 on 8.7p1-34.3
  - Build without Kerberos support (shortens "ldd sshd" from 20 to 13 lines)


author: Solar Designer <solar@openwall.com> 8.7p1-34.3.el9_3.security.0.3
changelog:
  - Comment out GSSAPI* lines in /etc/ssh/ssh*_config.d/50-redhat.conf and patch
    the code to silently ignore GSSAPIKexAlgorithms when unsupported (like it is
    in our new without-Kerberos build)


author: Florian Weimer <fweimer@redhat.com> - 2.34-100.2
changelog:
  - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34318)
  - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache
  - CVE-2024-33601: nscd: crash on out-of-memory condition
  - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules


