Status of SCP vulnerability

Johnsen XXXXX johnsen32 at mailbox.org
Sun Jan 20 08:02:31 AEDT 2019


Hello,

I would like to request an update of the progress regarding fixes for the recently disclosed SCP vulnerability (CVE-2018-20685, CVE-2019-6111, CVE-2019-6109, CVE-2019-6110)

It has been stated that CVE-2018-20685 has been patched in november but there are currently no information available on the progress of patches regarding the other CVEs.

Will there be a patched release any time soon?


Please note that exploits are already available for this issue:
https://www.exploit-db.com/exploits/46193


More information about the openssh-unix-dev mailing list