Hi guys, I am now in process of preparing patch for OpenSSH 8.4p1 to address CVE-2021-41617 (fixed in OpenSSH 8.8p1), but it is not quite clear to me which particular commits are relevant. So far I have identified following ones: https://github.com/openssh/openssh-portable/commit/f3cbe43e28fe71427d41cfe3a17125b972710455 https://github.com/openssh/openssh-portable/commit/bf944e3794eff5413f2df1ef37cddf96918c6bde Could you please let me know that those are the right ones or if there are more commits to be included? Thank you, Jan Damborsky _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev