Baruch Siach 0e418046b1 package/openssh: add upstream security fix ...

Fixes CVE-2018-20685: The scp client allows server to modify permissions
of the target directory by using empty ("D0777 0 \n") or dot ("D0777 0
.\n") directory name.

The bug reporter lists a number of related vulnerabilities that are not
fixed yet:

  https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 8233c66612)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2019-01-24 17:25:24 +01:00

..

0001-upstream-disallow-empty-incoming-filename-or-ones-th.patch

package/openssh: add upstream security fix

2019-01-24 17:25:24 +01:00

Config.in

…

openssh.hash

…

openssh.mk

…

S50sshd

…

sshd.service

…