I see that Ubuntu CVE/Security advisories only mention the source package name (openssh) and not the package name (openssh-server)
case in point: CVE-2023-48795 which affects openssh sftp server but Ubuntu CVE/Security advisories report only openssh.
How do i search if openssh sftpserver 1:8.9p1-ubuntu0.3 is impacted ?
https://ubuntu.com/security/CVE-2023-48795 (shows only openssh and not opensshsftpserver)
Thanks Inder
