Bug#225238: sshconnect.c format string issue
Package: ssh
Version: 1:3.6.1p2-10
Severity: normal
OpenSSH 3.7 fixed a small format string issue in sshconnect.c. Here's a
backport:
* looking for fw@deneb.enyo.de--2003-public/openssh--portable--3.6.1--base-0 to compare with
* comparing to fw@deneb.enyo.de--2003-public/openssh--portable--3.6.1--base-0
M sshconnect.c
* modified files
--- orig/sshconnect.c
+++ mod/sshconnect.c
@@ -774,7 +774,7 @@
host_file, host_line);
}
if (options.strict_host_key_checking == 1) {
- log(msg);
+ log("%s", msg);
error("Exiting, you have requested strict checking.");
goto fail;
} else if (options.strict_host_key_checking == 2) {
@@ -783,7 +783,7 @@
if (!confirm(msg))
goto fail;
} else {
- log(msg);
+ log("%s", msg);
}
}
Reply to: