Package: openssh-client Version: 1:6.7p1-6 Severity: important Tags: security Forwarded: https://bugzilla.mindrot.org/show_bug.cgi?id=2434
I have reported the following bug upstream (I don't think it is specific to Debian): When outputting filenames to the terminal, scp doesn't filter out non-printable characters. Example: $ touch "ab`tput clear`cd" $ ls ab* ab?[H?[2Jcd $ scp ab* localhost:/tmp clears the screen. -- System Information: Debian Release: stretch/sid APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores) Locale: LANG=POSIX, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages openssh-client depends on: ii adduser 3.113+nmu3 ii dpkg 1.18.1 ii libc6 2.19-19 ii libedit2 3.1-20150325-1 ii libgssapi-krb5-2 1.13.2+dfsg-2 ii libselinux1 2.3-2+b1 ii libssl1.0.0 1.0.2d-1 ii passwd 1:4.2-3 ii zlib1g 1:1.2.8.dfsg-2+b1 Versions of packages openssh-client recommends: ii xauth 1:1.0.9-1 Versions of packages openssh-client suggests: pn keychain <none> pn libpam-ssh <none> pn monkeysphere <none> pn ssh-askpass <none> -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
