Description
An issue was discovered in the Amazon Linux packages of OpenSSH 7.4 for Amazon Linux 1 and 2, because of an incomplete fix for CVE-2019-6111 within these specific packages. The fix had only covered cases where an absolute path is passed to scp. When a relative path is used, there is no verification that the name of a file received by the client matches the file requested. Fixed packages are available with numbers 7.4p1-22.78.amzn1 and 7.4p1-22.amzn2.0.2.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | openssh +7 | 7.4p1-22.amzn2.0.2 | ALAS2-2023-2202 |
| Amazon Linux 2 | pam_ssh_agent_auth | 0.10.3-2.22.amzn2.0.2 | ALAS2-2023-2202 |
Advisories 1
- ALAS2-2023-2202 Moderate: openssh security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Aug 8, 2023