Advisories » MGASA-2019-0067

Updated openssh packages fix security vulnerability

Publication date: 13 Feb 2019
Modification date: 13 Feb 2019
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-20685

Description

In OpenSSH, scp.c in the scp client allows remote SSH servers to bypass
intended access restrictions via the filename of . or an empty filename
(CVE-2018-20685).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=24191
• https://lists.opensuse.org/opensuse-updates/2019-01/msg00094.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20685

SRPMS

6/core

• openssh-7.5p1-2.3.mga6