OpenSSH: Multiple vulnerabilities

OpenSSH: Multiple vulnerabilities Multiple vulnerabilities have been found in OpenSSH, the worst of which could allow a remote attacker to gain unauthorized access. openssh 2019-03-20 2019-03-20 675520 675522 remote 7.9_p1-r4 7.9_p1-r4

OpenSSH is a complete SSH protocol implementation that includes SFTP client and server support.

Multiple vulnerabilities have been discovered in OpenSSH. Please review the CVE identifiers referenced below for details.

A remote attacker could overwrite arbitrary files, transfer malicious files, or gain unauthorized access.

There is no known workaround at this time.

All OpenSSH users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=net-misc/openssh-7.9_p1-r4"

CVE-2018-20685 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 BlueKnight b-man