Errata overview
Errata ID 63
Date 2018-05-16
Source package openssh
Fixed in version 1:7.4p1-10+deb9u3
Description
This update addresses the following issue:
* CVE-2017-15906: In read-only mode, sftp-server was incorrectly permitting
  creation of zero-length files.
Additional notes
CVE ID CVE-2017-15906
UCS Bug number #46619