https://bugzilla.mindrot.org/show_bug.cgi?id=3693
Damien Miller <d...@mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |d...@mindrot.org --- Comment #1 from Damien Miller <d...@mindrot.org> --- No, it's not based on the protocol because it's local only. How could a server exploit this? There's no way for sftp to pass server output to its command input unless the user explicitly configures it. -- You are receiving this mail because: You are watching someone on the CC list of the bug. You are watching the assignee of the bug. _______________________________________________ openssh-bugs mailing list openssh-bugs@mindrot.org https://lists.mindrot.org/mailman/listinfo/openssh-bugs