In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1:7.2p2-4ubuntu2.10+esm6", "binary_name": "openssh-client" }, { "binary_version": "1:7.2p2-4ubuntu2.10+esm6", "binary_name": "openssh-client-dbgsym" }, { "binary_version": "1:7.2p2-4ubuntu2.10+esm6", "binary_name": "openssh-client-ssh1" }, { "binary_version": "1:7.2p2-4ubuntu2.10+esm6", "binary_name": "openssh-client-ssh1-dbgsym" }, { "binary_version": "1:7.2p2-4ubuntu2.10+esm6", "binary_name": "openssh-client-udeb" }, { "binary_version": "1:7.2p2-4ubuntu2.10+esm6", "binary_name": "openssh-client-udeb-dbgsym" }, { "binary_version": "1:7.2p2-4ubuntu2.10+esm6", "binary_name": "openssh-server" }, { "binary_version": "1:7.2p2-4ubuntu2.10+esm6", "binary_name": "openssh-server-dbgsym" }, { "binary_version": "1:7.2p2-4ubuntu2.10+esm6", "binary_name": "openssh-server-udeb" }, { "binary_version": "1:7.2p2-4ubuntu2.10+esm6", "binary_name": "openssh-server-udeb-dbgsym" }, { "binary_version": "1:7.2p2-4ubuntu2.10+esm6", "binary_name": "openssh-sftp-server" }, { "binary_version": "1:7.2p2-4ubuntu2.10+esm6", "binary_name": "openssh-sftp-server-dbgsym" }, { "binary_version": "1:7.2p2-4ubuntu2.10+esm6", "binary_name": "ssh" }, { "binary_version": "1:7.2p2-4ubuntu2.10+esm6", "binary_name": "ssh-askpass-gnome" }, { "binary_version": "1:7.2p2-4ubuntu2.10+esm6", "binary_name": "ssh-askpass-gnome-dbgsym" }, { "binary_version": "1:7.2p2-4ubuntu2.10+esm6", "binary_name": "ssh-krb5" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1:7.6p1-4ubuntu0.7+esm3", "binary_name": "openssh-client" }, { "binary_version": "1:7.6p1-4ubuntu0.7+esm3", "binary_name": "openssh-client-dbgsym" }, { "binary_version": "1:7.6p1-4ubuntu0.7+esm3", "binary_name": "openssh-client-udeb" }, { "binary_version": "1:7.6p1-4ubuntu0.7+esm3", "binary_name": "openssh-server" }, { "binary_version": "1:7.6p1-4ubuntu0.7+esm3", "binary_name": "openssh-server-dbgsym" }, { "binary_version": "1:7.6p1-4ubuntu0.7+esm3", "binary_name": "openssh-server-udeb" }, { "binary_version": "1:7.6p1-4ubuntu0.7+esm3", "binary_name": "openssh-sftp-server" }, { "binary_version": "1:7.6p1-4ubuntu0.7+esm3", "binary_name": "openssh-sftp-server-dbgsym" }, { "binary_version": "1:7.6p1-4ubuntu0.7+esm3", "binary_name": "ssh" }, { "binary_version": "1:7.6p1-4ubuntu0.7+esm3", "binary_name": "ssh-askpass-gnome" }, { "binary_version": "1:7.6p1-4ubuntu0.7+esm3", "binary_name": "ssh-askpass-gnome-dbgsym" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.9", "binary_name": "openssh-client" }, { "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.9", "binary_name": "openssh-client-dbgsym" }, { "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.9", "binary_name": "openssh-client-hmac" }, { "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.9", "binary_name": "openssh-client-udeb" }, { "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.9", "binary_name": "openssh-server" }, { "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.9", "binary_name": "openssh-server-dbgsym" }, { "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.9", "binary_name": "openssh-server-hmac" }, { "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.9", "binary_name": "openssh-server-udeb" }, { "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.9", "binary_name": "openssh-sftp-server" }, { "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.9", "binary_name": "openssh-sftp-server-dbgsym" }, { "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.9", "binary_name": "openssh-tests" }, { "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.9", "binary_name": "openssh-tests-dbgsym" }, { "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.9", "binary_name": "ssh" }, { "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.9", "binary_name": "ssh-askpass-gnome" }, { "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.9", "binary_name": "ssh-askpass-gnome-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1:8.2p1-4ubuntu0.11", "binary_name": "openssh-client" }, { "binary_version": "1:8.2p1-4ubuntu0.11", "binary_name": "openssh-client-dbgsym" }, { "binary_version": "1:8.2p1-4ubuntu0.11", "binary_name": "openssh-client-udeb" }, { "binary_version": "1:8.2p1-4ubuntu0.11", "binary_name": "openssh-server" }, { "binary_version": "1:8.2p1-4ubuntu0.11", "binary_name": "openssh-server-dbgsym" }, { "binary_version": "1:8.2p1-4ubuntu0.11", "binary_name": "openssh-server-udeb" }, { "binary_version": "1:8.2p1-4ubuntu0.11", "binary_name": "openssh-sftp-server" }, { "binary_version": "1:8.2p1-4ubuntu0.11", "binary_name": "openssh-sftp-server-dbgsym" }, { "binary_version": "1:8.2p1-4ubuntu0.11", "binary_name": "openssh-tests" }, { "binary_version": "1:8.2p1-4ubuntu0.11", "binary_name": "openssh-tests-dbgsym" }, { "binary_version": "1:8.2p1-4ubuntu0.11", "binary_name": "ssh" }, { "binary_version": "1:8.2p1-4ubuntu0.11", "binary_name": "ssh-askpass-gnome" }, { "binary_version": "1:8.2p1-4ubuntu0.11", "binary_name": "ssh-askpass-gnome-dbgsym" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1:8.2p1-4ubuntu0.fips.0.11", "binary_name": "openssh-client" }, { "binary_version": "1:8.2p1-4ubuntu0.fips.0.11", "binary_name": "openssh-client-dbgsym" }, { "binary_version": "1:8.2p1-4ubuntu0.fips.0.11", "binary_name": "openssh-client-udeb" }, { "binary_version": "1:8.2p1-4ubuntu0.fips.0.11", "binary_name": "openssh-server" }, { "binary_version": "1:8.2p1-4ubuntu0.fips.0.11", "binary_name": "openssh-server-dbgsym" }, { "binary_version": "1:8.2p1-4ubuntu0.fips.0.11", "binary_name": "openssh-server-udeb" }, { "binary_version": "1:8.2p1-4ubuntu0.fips.0.11", "binary_name": "openssh-sftp-server" }, { "binary_version": "1:8.2p1-4ubuntu0.fips.0.11", "binary_name": "openssh-sftp-server-dbgsym" }, { "binary_version": "1:8.2p1-4ubuntu0.fips.0.11", "binary_name": "openssh-tests" }, { "binary_version": "1:8.2p1-4ubuntu0.fips.0.11", "binary_name": "openssh-tests-dbgsym" }, { "binary_version": "1:8.2p1-4ubuntu0.fips.0.11", "binary_name": "ssh" }, { "binary_version": "1:8.2p1-4ubuntu0.fips.0.11", "binary_name": "ssh-askpass-gnome" }, { "binary_version": "1:8.2p1-4ubuntu0.fips.0.11", "binary_name": "ssh-askpass-gnome-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1:8.9p1-3ubuntu0.6", "binary_name": "openssh-client" }, { "binary_version": "1:8.9p1-3ubuntu0.6", "binary_name": "openssh-client-dbgsym" }, { "binary_version": "1:8.9p1-3ubuntu0.6", "binary_name": "openssh-server" }, { "binary_version": "1:8.9p1-3ubuntu0.6", "binary_name": "openssh-server-dbgsym" }, { "binary_version": "1:8.9p1-3ubuntu0.6", "binary_name": "openssh-sftp-server" }, { "binary_version": "1:8.9p1-3ubuntu0.6", "binary_name": "openssh-sftp-server-dbgsym" }, { "binary_version": "1:8.9p1-3ubuntu0.6", "binary_name": "openssh-tests" }, { "binary_version": "1:8.9p1-3ubuntu0.6", "binary_name": "openssh-tests-dbgsym" }, { "binary_version": "1:8.9p1-3ubuntu0.6", "binary_name": "ssh" }, { "binary_version": "1:8.9p1-3ubuntu0.6", "binary_name": "ssh-askpass-gnome" }, { "binary_version": "1:8.9p1-3ubuntu0.6", "binary_name": "ssh-askpass-gnome-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1:9.6p1-3ubuntu1", "binary_name": "openssh-client" }, { "binary_version": "1:9.6p1-3ubuntu1", "binary_name": "openssh-client-dbgsym" }, { "binary_version": "1:9.6p1-3ubuntu1", "binary_name": "openssh-server" }, { "binary_version": "1:9.6p1-3ubuntu1", "binary_name": "openssh-server-dbgsym" }, { "binary_version": "1:9.6p1-3ubuntu1", "binary_name": "openssh-sftp-server" }, { "binary_version": "1:9.6p1-3ubuntu1", "binary_name": "openssh-sftp-server-dbgsym" }, { "binary_version": "1:9.6p1-3ubuntu1", "binary_name": "openssh-tests" }, { "binary_version": "1:9.6p1-3ubuntu1", "binary_name": "openssh-tests-dbgsym" }, { "binary_version": "1:9.6p1-3ubuntu1", "binary_name": "ssh" }, { "binary_version": "1:9.6p1-3ubuntu1", "binary_name": "ssh-askpass-gnome" }, { "binary_version": "1:9.6p1-3ubuntu1", "binary_name": "ssh-askpass-gnome-dbgsym" } ] }