Status of SCP vulnerability

Johnsen XXXXX johnsen32 at
Sun Jan 20 08:02:31 AEDT 2019


I would like to request an update of the progress regarding fixes for the recently disclosed SCP vulnerability (CVE-2018-20685, CVE-2019-6111, CVE-2019-6109, CVE-2019-6110)

It has been stated that CVE-2018-20685 has been patched in november but there are currently no information available on the progress of patches regarding the other CVEs.

Will there be a patched release any time soon?

Please note that exploits are already available for this issue:

More information about the openssh-unix-dev mailing list