On Thu, Aug 03, 2023 at 11:29:03AM +0200, Dmitry Belyavskiy wrote:
Dear colleagues,
I've pushed a fresh build of OpenSSH to rawhide. We decided to drop the sshd.socket unit from rawhide. We don't think it's worth going through the changes process, but would like to provide a heads-up.
See the details in https://bugzilla.redhat.com/show_bug.cgi?id=2025716.
The DoS attack is described here:
https://bugs.archlinux.org/task/62248
... and it sounds like a bug in systemd. Surely this same attack applies to any socket-activated service so should be fixed in systemd? I don't recall inetd having the same problem.
Rich.