Displaying 1 result from an estimated 1 matches for "391ffc4b9".
2019 Jan 30
3
Is sshd supposed to interpret "{a,b}" brace expansions?
Hi,
the proposed fix for CVE-2019-6111 [1] adds file name validation to scp
to prevent the server from sending files that the client actually did
not request. Now, a consequence of that patch is that commands which
contain server-side brace expansions such as
$ scp remote:'/etc/{passwd,group}' .
error: unexpected filename: passwd
no longer work. Shell globs such as [abc], ?, *,