DSA-4387: -1 openssh -- security update

Published Feb 9, 2019

Updated

Harry Sintonen from F-Secure Corporation discovered multiple vulnerabilities in OpenSSH, an implementation of the SSH protocol suite. All the vulnerabilities are in found in the scp client implementing the SCP protocol.

Affected Software

2 affected components

debian/openssh

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade openssh to a version that resolves this vulnerability.
Patch DSA-4387-1

Event History

Feb 9, 2019

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which part of OpenSSH is affected?

The vulnerabilities are in the scp client implementation of the SCP protocol. The provided information does not identify other OpenSSH components as affected.

What is the scope of the affected software?

The advisory applies to Debian's openssh package. It describes multiple vulnerabilities reported by Harry Sintonen of F-Secure Corporation.