Bug#923486: CVE-2019-6111 not fixed, file transfer of unwanted files by malicious SSH server still possible

To: Salvatore Bonaccorso <carnil@debian.org>
Cc: 923486@bugs.debian.org
Subject: Bug#923486: CVE-2019-6111 not fixed, file transfer of unwanted files by malicious SSH server still possible
From: Mike Gabriel <sunweaver@debian.org>
Date: Thu, 28 Feb 2019 21:49:57 +0000
Message-id: <[🔎] 20190228214957.Horde.Df9qYckf6oGAzW1JogrYZ7i@mail.das-netzwerkteam.de>
Reply-to: Mike Gabriel <sunweaver@debian.org>, 923486@bugs.debian.org
In-reply-to: <[🔎] 20190228214326.GA24302@eldamar.local>
References: <[🔎] 20190228205451.Horde.tBOWJjnj4hjTh4TJUw1N8l8@mail.das-netzwerkteam.de> <[🔎] 20190228214326.GA24302@eldamar.local> <[🔎] 20190228205451.Horde.tBOWJjnj4hjTh4TJUw1N8l8@mail.das-netzwerkteam.de>

Hi Salvatore,

On  Do 28 Feb 2019 22:43:26 CET, Salvatore Bonaccorso wrote:

Hi

Unchecked yet, but there was a related follow up commit upstream as
perhttps://anongit.mindrot.org/openssh.git/commit/?id=3d896c157c722bc47adca51a58dca859225b5874
Regards,
Salvatore


will rebase that against my jessie version and try it out tomorrow.

Thanks!
Mike
--

mike gabriel aka sunweaver (Debian Developer)
mobile: +49 (1520) 1976 148
landline: +49 (4354) 8390 139

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: sunweaver@debian.org, http://sunweavers.net

Attachment: pgpQ7_vUFoIhb.pgp
Description: Digitale PGP-Signatur

Reply to:

References:
- Bug#923486: CVE-2019-6111 not fixed, file transfer of unwanted files by malicious SSH server still possible
  - From: Mike Gabriel <sunweaver@debian.org>
- Bug#923486: CVE-2019-6111 not fixed, file transfer of unwanted files by malicious SSH server still possible
  - From: Salvatore Bonaccorso <carnil@debian.org>

Prev by Date: Bug#923486: CVE-2019-6111 not fixed, file transfer of unwanted files by malicious SSH server still possible
Next by Date: Processed: tagging 923486
Previous by thread: Bug#923486: CVE-2019-6111 not fixed, file transfer of unwanted files by malicious SSH server still possible
Next by thread: Bug#923486: CVE-2019-6111 not fixed, file transfer of unwanted files by malicious SSH server still possible
Index(es):
- Date
- Thread