diff options
| author | Colin Watson <cjwatson@debian.org> | 2019-01-12 18:47:36 +0000 |
|---|---|---|
| committer | Colin Watson <cjwatson@debian.org> | 2019-01-12 18:48:52 +0000 |
| commit | 7e34cc252e1c42369aaaa8e1c379699ccf8c9e0e (patch) | |
| tree | 642e1d00319b5f4abafeea0887c29d7904f873ed /debian/changelog | |
| parent | a604dd3f234ebbb2823e6af39d58966d4c7d7282 (diff) | |
| parent | dee21e97428e69d30e2d15c71f3e7cc08bf8e4f8 (diff) | |
scp: disallow empty incoming filename or "."
Closes: #919101
Diffstat (limited to 'debian/changelog')
| -rw-r--r-- | debian/changelog | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog index aee8f7b88..864e7b689 100644 --- a/debian/changelog +++ b/debian/changelog | |||
| @@ -4,6 +4,8 @@ openssh (1:7.9p1-5) UNRELEASED; urgency=medium | |||
| 4 | only used by sshd (closes: #858050). | 4 | only used by sshd (closes: #858050). |
| 5 | * Drop obsolete alternate build-dependency on libssl1.0-dev (closes: | 5 | * Drop obsolete alternate build-dependency on libssl1.0-dev (closes: |
| 6 | #917342). | 6 | #917342). |
| 7 | * CVE-2018-20685: Apply upstream scp patch to disallow empty incoming | ||
| 8 | filename or ones that refer to the current directory (closes: #919101). | ||
| 7 | 9 | ||
| 8 | -- Colin Watson <cjwatson@debian.org> Thu, 06 Dec 2018 18:16:30 +0000 | 10 | -- Colin Watson <cjwatson@debian.org> Thu, 06 Dec 2018 18:16:30 +0000 |
| 9 | 11 | ||