similar to: [Bug 1094] Local to local copy (and also remote to remote) uses shell expansion twice

Hello, I would like to request an update of the progress regarding fixes for the recently disclosed SCP vulnerability (CVE-2018-20685, CVE-2019-6111, CVE-2019-6109, CVE-2019-6110) It has been stated that CVE-2018-20685 has been patched in november but there are currently no information available on the progress of patches regarding the other CVEs. Will there be a patched release any time soon?

https://bugzilla.mindrot.org/show_bug.cgi?id=2528 Bug ID: 2528 Summary: sftp "put -r ." broken starting with 6.8 Product: Portable OpenSSH Version: 6.8p1 Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component: sftp Assignee: unassigned-bugs at

https://bugzilla.mindrot.org/show_bug.cgi?id=928 Mike Frysinger <vapier at gentoo.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |vapier at gentoo.org --- Comment #39 from Mike Frysinger <vapier at gentoo.org> --- Created attachment 2571

https://bugzilla.mindrot.org/show_bug.cgi?id=2016 Mike Frysinger <vapier at gentoo.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |DUPLICATE CC|

https://bugzilla.mindrot.org/show_bug.cgi?id=1604 Mike Frysinger <vapier at gentoo.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #1646|0 |1 is obsolete| | CC| |vapier at

Fixes bug 24595. Signed-off-by: Francisco Jerez <currojerez at riseup.net> --- src/nv_crtc.c | 34 ++++------------------------------ 1 files changed, 4 insertions(+), 30 deletions(-) diff --git a/src/nv_crtc.c b/src/nv_crtc.c index 2ae36a0..9708741 100644 --- a/src/nv_crtc.c +++ b/src/nv_crtc.c @@ -888,8 +888,6 @@ static void nv_crtc_unlock(xf86CrtcPtr crtc) { } -#define

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=527 ------- Additional Comments From vapier@gentoo.org 2006-12-30 05:34 MET ------- Created an attachment (id=280) --> (https://bugzilla.netfilter.org/bugzilla/attachment.cgi?id=280&action=view) iptables-more-exact-check-grep.patch this tweaks the grep: egrep -e '(^|[[:space:]])(-g|-pg|-DIPTC_DEBUG)([[:space:]]|$)'

http://bugzilla.mindrot.org/show_bug.cgi?id=1145 vapier at gentoo.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED Summary|cross compiling openssh |cross compiling openssh

https://bugzilla.mindrot.org/show_bug.cgi?id=1604 Mike Frysinger <vapier at gentoo.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |seggelmann at fh-muenster.de --- Comment #9 from Mike Frysinger <vapier at gentoo.org> --- *** Bug 2016 has

https://bugzilla.mindrot.org/show_bug.cgi?id=1604 Mike Frysinger <vapier at gentoo.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #2572|0 |1 is obsolete| | --- Comment #12 from Mike Frysinger <vapier at

http://bugzilla.mindrot.org/show_bug.cgi?id=1078 Summary: passing --without-kerberos5 still checks for some kerberos support Product: Portable OpenSSH Version: -current Platform: All OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: Documentation AssignedTo:

https://bugzilla.mindrot.org/show_bug.cgi?id=2949 Bug ID: 2949 Summary: "limits at openssh.com" extension to SFTP to query various transfer limits Product: Portable OpenSSH Version: -current Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5

https://bugzilla.mindrot.org/show_bug.cgi?id=2369 Bug ID: 2369 Summary: `ssh-keygen -A` errors on RSA1 when building with SSH1 disabled Product: Portable OpenSSH Version: 6.9p1 Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component: ssh-keygen

http://bugzilla.mindrot.org/show_bug.cgi?id=1294 Summary: includes.h should pull in string.h based on HAVE_STRING_H Product: Portable OpenSSH Version: 4.6p1 Platform: Other OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: Build system AssignedTo: bitbucket

http://bugzilla.mindrot.org/show_bug.cgi?id=1234 Summary: configure adds opensc libs to LDFLAGS when it should use LIBS Product: Portable OpenSSH Version: -current Platform: Other OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: Build system AssignedTo:

https://bugzilla.samba.org/show_bug.cgi?id=3172 ------- Additional Comments From vapier@gentoo.org 2005-10-15 20:47 ------- Created an attachment (id=1516) --> (https://bugzilla.samba.org/attachment.cgi?id=1516&action=view) test.log -- Configure bugmail: https://bugzilla.samba.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA contact

https://bugzilla.samba.org/show_bug.cgi?id=3667 Summary: touch rsync configure output Product: rsync Version: 2.6.8 Platform: All OS/Version: Linux Status: NEW Severity: trivial Priority: P3 Component: core AssignedTo: wayned@samba.org ReportedBy: vapier@gentoo.org QAContact:

There are multiple problems with the elf2flt usage in the configure script: - clobbers LDFLAGS - is used for all targets so breaks non-FLAT targets - is only used for Blackfin FLAT targets Signed-off-by: Mike Frysinger <vapier at gentoo.org> --- configure.ac | 4 +++- 1 files changed, 3 insertions(+), 1 deletions(-) diff --git a/configure.ac b/configure.ac index cc30d99..3179521

https://bugzilla.samba.org/show_bug.cgi?id=5506 Summary: support utime differences at runtime, not configure/build time Product: rsync Version: 3.0.3 Platform: All URL: http://thread.gmane.org/gmane.network.rsync.general/1794 8 OS/Version: Linux Status: NEW Severity:

https://bugzilla.samba.org/show_bug.cgi?id=6422 Summary: rsync needlessly aborts when getcwd() fails Product: rsync Version: 3.0.6 Platform: Other OS/Version: Linux Status: NEW Severity: normal Priority: P3 Component: core AssignedTo: wayned@samba.org ReportedBy: vapier@gentoo.org