Debian/openssh: high 8.1
In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also
Action: Upgrade openssh to 1:9.2p1-2+deb12u10 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:9.2p1-2+deb12u10 | - |
Fixed versions
| 1:9.2p1-2+deb12u10 |
Sources
published · modified · JSON