In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred. 3 CVE-2019-6109: 284: 2019-01-31: 2019-05-03. Background OpenSSH is a complete SSH protocol implementation that includes SFTP client and server support. Description Multiple vulnerabilities have been discovered in OpenSSH. Please review the CVE identifiers referenced below for details. Impact A remote attacker could overwrite arbitrary files, transfer malicious files, or gain unauthorized access.
Contents
Openssh 7.9 P1 Ubuntu 10 Exploit
Installed Programs:scp, sftp, slogin (symlink to ssh), ssh, ssh-add, ssh-agent, ssh-copy-id, ssh-keygen, ssh-keyscan, and sshd
Installed Directories:/etc/ssh, /usr/share/doc/openssh-7.9p1, and /var/lib/sshd
Short Descriptions
scp | is a file copy program that acts like rcp except it uses an encrypted protocol. |
sftp | is an FTP-like program that works over the SSH1 and SSH2 protocols. |
slogin | is a symlink to ssh. |
ssh | is an rlogin/rsh-like client program except it uses an encrypted protocol. |
sshd | is a daemon that listens for ssh login requests. |
ssh-add | is a tool which adds keys to the ssh-agent. |
ssh-agent | is an authentication agent that can store private keys. |
ssh-copy-id | is a script that enables logins on remote machine using local keys. |
ssh-keygen | is a key generation tool. |
ssh-keyscan | is a utility for gathering public host keys from a number of hosts. |
Package Details: openssh-git 7.9.P1.r242.gf5abb05f-1
Package Actions
- View PKGBUILD / View Changes
| Git Clone URL: | https://aur.archlinux.org/openssh-git.git (read-only, click to copy) |
|---|---|
| Package Base: | openssh-git |
| Description: | Free version of the SSH connectivity tools |
| Upstream URL: | http://www.openssh.org/portable.html |
| Licenses: | custom:BSD |
| Conflicts: | openssh |
| Provides: | openssh |
| Submitter: | eworm |
| Maintainer: | eworm |
| Last Packager: | eworm |
| Votes: | 1 |
| Popularity: | 0.000095 |
| First Submitted: | 2014-01-28 09:20 |
| Last Updated: | 2019-03-28 09:05 |
Dependencies (8)
- krb5(krb5-git, krb5-minimal-git)
- ldns(ldns-git)
- openssl(libressl-git, openssl-purify, openssl-zlib, openssl-git, openssl-weak-ciphers, openssl-hardened, openssl-static)
- git(git-git)(make)
- linux-headers(linux-surfacepro3-git-headers, linux-aarch64-rock64-bin-headers, linux-ec2-headers, linux-galliumos-headers, linux-zest-git-headers, linux-lts49-kallsyms-headers, linux-bootsplash-headers, linux-odroid-headers, linux-phicomm-n1-headers)(make)
- x11-ssh-askpass(gnome-ssh-askpass2, ssh-askpass-fullscreen, ksshaskpass-git, seahorse-git, gnome-ssh-askpass3, xaskpass, ksshaskpass, openssh-askpass, seahorse)(optional) – input passphrase in X
- xorg-xauth(optional) – X11 forwarding
Required by (297)
- airvpn-beta-bin(requires openssh)(optional)
- airvpn-bin(requires openssh)(optional)
- amanda(requires openssh)
- apt-dater(requires openssh)
- apt-dater-legacy(requires openssh)
- arkade-bin(requires openssh)
- asbru-cm(requires openssh)(optional)
- asbru-cm(requires openssh)
- asbru-cm-git(requires openssh)
- asbru-cm-git(requires openssh)(optional)
- asbru-cm-loki-git(requires openssh)(optional)
- asbru-cm-loki-git(requires openssh)
- astk(requires openssh)
- astk(requires openssh)(optional)
- backintime-cli(requires openssh)
- backintime-cli-git(requires openssh)
- backintime-cli-git(requires openssh)(make)
- backintime-git(requires openssh)(make)
- balena-cli(requires openssh)(optional)
- balena-cli-bin(requires openssh)(optional)
- bbcp-git(requires openssh)
- beef-cerberus-git(requires openssh)
- borg-git(requires openssh)(optional)
- bosh-cli(requires openssh)(optional)
- btrbk(requires openssh)(optional)
- btrbk-git(requires openssh)(optional)
- btrfs-sxbackup(requires openssh)(optional)
- buceutils-git(requires openssh)
- buildbot-git(requires openssh)(check)
- buildroot-meta(requires openssh)(optional)
- buildstuff(requires openssh)
- calendar(requires openssh)(make)
- cdist(requires openssh)
- clustershell(requires openssh)(optional)
- collabora-online-server-nodocker(requires openssh)
- collabora-online-server-nodocker_ar(requires openssh)
- collabora-online-server-nodocker_as(requires openssh)
- collabora-online-server-nodocker_bg(requires openssh)
- collabora-online-server-nodocker_bn-in(requires openssh)
- collabora-online-server-nodocker_br(requires openssh)
- collabora-online-server-nodocker_ca(requires openssh)
- collabora-online-server-nodocker_ca-valencia(requires openssh)
- collabora-online-server-nodocker_cs(requires openssh)
- collabora-online-server-nodocker_cy(requires openssh)
- collabora-online-server-nodocker_da(requires openssh)
- collabora-online-server-nodocker_de(requires openssh)
- collabora-online-server-nodocker_el(requires openssh)
- collabora-online-server-nodocker_en(requires openssh)
- collabora-online-server-nodocker_en-gb(requires openssh)
- collabora-online-server-nodocker_es(requires openssh)
- collabora-online-server-nodocker_et(requires openssh)
- collabora-online-server-nodocker_eu(requires openssh)
- collabora-online-server-nodocker_fi(requires openssh)
- collabora-online-server-nodocker_fr(requires openssh)
- collabora-online-server-nodocker_ga(requires openssh)
- collabora-online-server-nodocker_gd(requires openssh)
- collabora-online-server-nodocker_gl(requires openssh)
- collabora-online-server-nodocker_gu(requires openssh)
- collabora-online-server-nodocker_he(requires openssh)
- collabora-online-server-nodocker_hi(requires openssh)
- collabora-online-server-nodocker_hr(requires openssh)
- collabora-online-server-nodocker_hu(requires openssh)
- collabora-online-server-nodocker_id(requires openssh)
- collabora-online-server-nodocker_is(requires openssh)
- collabora-online-server-nodocker_it(requires openssh)
- collabora-online-server-nodocker_ja(requires openssh)
- collabora-online-server-nodocker_km(requires openssh)
- collabora-online-server-nodocker_kn(requires openssh)
- collabora-online-server-nodocker_ko(requires openssh)
- collabora-online-server-nodocker_lt(requires openssh)
- collabora-online-server-nodocker_lv(requires openssh)
- collabora-online-server-nodocker_ml(requires openssh)
- collabora-online-server-nodocker_mr(requires openssh)
- collabora-online-server-nodocker_nb(requires openssh)
- collabora-online-server-nodocker_nl(requires openssh)
- collabora-online-server-nodocker_nn(requires openssh)
- collabora-online-server-nodocker_no(requires openssh)
- collabora-online-server-nodocker_oc(requires openssh)
- collabora-online-server-nodocker_or(requires openssh)
- collabora-online-server-nodocker_pa-in(requires openssh)
- collabora-online-server-nodocker_pl(requires openssh)
- collabora-online-server-nodocker_pt(requires openssh)
- collabora-online-server-nodocker_pt-br(requires openssh)
- collabora-online-server-nodocker_pt-pt(requires openssh)
- collabora-online-server-nodocker_ro(requires openssh)
- collabora-online-server-nodocker_ru(requires openssh)
- collabora-online-server-nodocker_sk(requires openssh)
- collabora-online-server-nodocker_sl(requires openssh)
- collabora-online-server-nodocker_sr(requires openssh)
- collabora-online-server-nodocker_sr-latn(requires openssh)
- collabora-online-server-nodocker_sv(requires openssh)
- collabora-online-server-nodocker_ta(requires openssh)
- collabora-online-server-nodocker_te(requires openssh)
- collabora-online-server-nodocker_tr(requires openssh)
- collabora-online-server-nodocker_uk(requires openssh)
- collabora-online-server-nodocker_vi(requires openssh)
- collabora-online-server-nodocker_zh-cn(requires openssh)
- collabora-online-server-nodocker_zh-tw(requires openssh)
- croco-tools-base-git(requires openssh)
- cros-container-guest-tools-git(requires openssh)
- curlbomb(requires openssh)(optional)
- cutehmi-external-meta(requires openssh)(optional)
- cvs-feature(requires openssh)(optional)
- dataleech(requires openssh)
- ddns(requires openssh)(optional)
- ddns-git(requires openssh)(optional)
- devtools-git(requires openssh)
- devtools32-git(requires openssh)
- diffoscope-git(requires openssh)(check)
- diffoscope-git(requires openssh)(optional)
- dracut-sshd-git(requires openssh)
- dscp(requires openssh)
- eclipse-dltk-shelled(requires openssh)(optional)
- eddie-cli(requires openssh)(optional)
- eddie-cli-git(requires openssh)(optional)
- eddie-ui(requires openssh)(optional)
- eddie-ui-git(requires openssh)(optional)
- envoy(requires openssh)
- envoy-git(requires openssh)
- ethoscope-device(requires openssh)
- ethoscope-node(requires openssh)
- extraterm-git(requires openssh)(make)
- fish-ssh-agent-git(requires openssh)
- fusioninventory-agent(requires openssh)(optional)
- gadmin-rsync(requires openssh)
- gandi.cli-git(requires openssh)
- gates-of-tartaros(requires openssh)(optional)
- getnewip(requires openssh)
- gin-cli(requires openssh)
- git-annex-cabal(requires openssh)
- git-annex-stack(requires openssh)
- git-deliver(requires openssh)
- gitea-git(requires openssh)(optional)
- gitlab-ee(requires openssh)
- gmi(requires openssh)
- gnome-control-center-git(requires openssh)(optional)
- gnome-control-center-nocheese(requires openssh)(optional)
- gnome-control-center-system76(requires openssh)(optional)
- gnome-keyring-git(requires openssh)
- gnome-rdp(requires openssh)(optional)
- gnupg-git(requires openssh)(check)
- gnupg-large-secmem(requires openssh)(check)
- gnupg-largekeys(requires openssh)(check)
- gnupg-minimal-git(requires openssh)(check)
- gnupg-scdaemon-shared-access(requires openssh)(check)
- gnupot(requires openssh)
- gogs(requires openssh)(optional)
- gogs-dev-git(requires openssh)(optional)
- gogs-git(requires openssh)(optional)
- goscanpdf(requires openssh)
- gossm-bin(requires openssh)
- got-diminished(requires openssh)(optional)
- gstm(requires openssh)
- gstm-git(requires openssh)
- gstm-gtk2(requires openssh)
- gvfs-afc-git(requires openssh)(make)
- gvfs-git(requires openssh)(make)
- gvfs-goa-git(requires openssh)(make)
- gvfs-google-git(requires openssh)(make)
- gvfs-gphoto2-git(requires openssh)(make)
- gvfs-mtp-git(requires openssh)(make)
- gvfs-nfs-git(requires openssh)(make)
- gvfs-smb-git(requires openssh)(make)
- hadoop(requires openssh)
- hash-slinger(requires openssh)(optional)
- hash-slinger-git(requires openssh)(optional)
- hollywood(requires openssh)
- holo(requires openssh)(make)
- holo(requires openssh)(optional)
- jellyshot-git(requires openssh)
- jim(requires openssh)
- k3sup-bin(requires openssh)
- kana-p-git(requires openssh)
- khefin(requires openssh)(optional)
- ksvnupdater(requires openssh)(optional)
- let-me-do(requires openssh)
- libssh-gnutls(requires openssh)(make)
- libssh-gnutls-docs(requires openssh)(make)
- link-backup(requires openssh)
- linux-timemachine-git(requires openssh)(optional)
- lone-tar(requires openssh)
- luckybackup(requires openssh)
- mandoc-cvs(requires openssh)(make)
- mandos-server(requires openssh)
- massh(requires openssh)
- maxio-git(requires openssh)
- molly-guard(requires openssh)
- monkeysphere(requires openssh)(check)
- mosh-git(requires openssh)
- mosh-sshagent-git(requires openssh)
- mpich(requires openssh)
- mpssh(requires openssh)
- mssh-git(requires openssh)
- muchsync(requires openssh)
- mysecureshell(requires openssh)
- netdrive-connector(requires openssh)
- networkmanager-dispatcher-sshd(requires openssh)
- nomachine(requires openssh)
- nx3-all(requires openssh)(optional)
- openmpi-gcc8(requires openssh)
- openmpi-gcc9(requires openssh)
- openmpi3(requires openssh)
- opennebula(requires openssh)
- openssh-known-hosts(requires openssh)(optional)
- openstack-nova(requires openssh)
- openstack-nova-doc(requires openssh)
- outrun-git(requires openssh)
- pacmanager-bin(requires openssh)
- pacmanager-git(requires openssh)
- pacpush(requires openssh)
- pacrepo-git(requires openssh)
- pam_ssh(requires openssh)
- pam_ssh_agent_auth(requires openssh)(optional)
- pam_ssh_agent_auth-git(requires openssh)(optional)
- pdsh(requires openssh)
- pdsh-genders(requires openssh)
- php-ssh(requires openssh)
- php-ssh-git(requires openssh)
- php-ssh-unstable(requires openssh)
- php56-ssh(requires openssh)
- piconnect-git(requires openssh)
- pitrery(requires openssh)(optional)
- pkgbuild-version-updater(requires openssh)
- plasma-runners-ssh(requires openssh)
- polysh(requires openssh)
- praetorian(requires openssh)
- prey-node-client(requires openssh)
- pvpn(requires openssh)
- pycharm-eap(requires openssh)(optional)
- pycharm-professional(requires openssh)(optional)
- pycharm-professional-edition(requires openssh)(optional)
- python-apache-libcloud(requires openssh)(check)
- python-btrfs-backup(requires openssh)(optional)
- python-pssh(requires openssh)
- python-ssh2(requires openssh)(check)
- python2-scoop(requires openssh)
- qssh(requires openssh)
- ragnar-git(requires openssh)
- rehackable_scripts-git(requires openssh)
- restream-git(requires openssh)
- rssh(requires openssh)
- safekeep(requires openssh)
- scannerl(requires openssh)
- scannerl-git(requires openssh)
- sibt-git(requires openssh)
- ssh-askpass-fullscreen(requires openssh)
- ssh-faker(requires openssh)
- ssh-ident-git(requires openssh)
- ssh-import-id-bzr(requires openssh)
- ssh-tools(requires openssh)
- ssh-tools-git(requires openssh)
- sshcd(requires openssh)
- sshcode(requires openssh)
- sshconf(requires openssh)
- sshd-launcher(requires openssh)
- sshdfilter(requires openssh)
- sshexport(requires openssh)
- sshgrid-git(requires openssh)
- sshlm-git(requires openssh)
- sshmenu(requires openssh)
- sshmnt(requires openssh)
- sshmultitool(requires openssh)
- sshprint(requires openssh)
- sshrc(requires openssh)
- sshrc-git(requires openssh)
- sshsocksvpn(requires openssh)
- sshto-git(requires openssh)
- sshtunnel-git(requires openssh)
- sshuttle-git(requires openssh)
- standard-test-roles(requires openssh)
- sugar-git(requires openssh)
- synapse-bzr(requires openssh)(optional)
- task-git(requires openssh)(optional)
- teiler-git(requires openssh)(optional)
- tlclient(requires openssh)
- tmuxer-git(requires openssh)(optional)
- topal(requires openssh)(optional)
- torque(requires openssh)
- uenv(requires openssh)(optional)
- uenv-git(requires openssh)(optional)
- uniprint-git(requires openssh)
- unreal-engine(requires openssh)(make)
- unreal-engine-git(requires openssh)(make)
- upl-git(requires openssh)
- usocks(requires openssh)(optional)
- vpn-minute(requires openssh)(optional)
- walinuxagent(requires openssh)
- waypipe(requires openssh)(optional)
- waypipe-git(requires openssh)(optional)
- wemux(requires openssh)
- wemux-git(requires openssh)
- wemux-restrict(requires openssh)
- wesnoth-git(requires openssh)(make)
- xxh-git(requires openssh)
- zfs-snap-manager(requires openssh)
- zsh-theme-powerlevel9k-git(requires openssh)(optional)
- zsnapd(requires openssh)(optional)
Openssh 7.9 P1005
jskier commented on 2020-01-22 23:39
Openssh 7.9 P1 Free
Would you be willing to add config --with-security-key-builtin and libfido2 for u2f testing?