8233c66612
Fixes CVE-2018-20685: The scp client allows server to modify permissions
of the target directory by using empty ("D0777 0 \n") or dot ("D0777 0
.\n") directory name.
The bug reporter lists a number of related vulnerabilities that are not
fixed yet:
https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
|
||
|---|---|---|
| .. | ||
| 0001-upstream-disallow-empty-incoming-filename-or-ones-th.patch | ||
| Config.in | ||
| openssh.hash | ||
| openssh.mk | ||
| S50sshd | ||
| sshd.service | ||