[ubuntu/trusty-updates] rssh 2.3.4-4+deb8u2ubuntu0.14.04.1 (Accepted)

[Ubuntu Archive Robot]

rssh (2.3.4-4+deb8u2ubuntu0.14.04.1) trusty-security; urgency=medium

  * SECURITY REGRESSION: The fix for the scp security vulnerability
    in 2.3.4-4+deb8u2build0.14.04.1 introduced a regression that
    blocked scp of multiple files from a server using rssh.  Based on
    further analysis of scp's command-line parsing, relax the check
    to require the server command contain -f or -t, which should
    deactivate scp's support for remote files.  (Closes: #921655)
    - Merged from Debian, thanks to Russ Allbery for the patch.

Date: 2019-02-12 01:49:11.869532+00:00
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/rssh/2.3.4-4+deb8u2ubuntu0.14.04.1
-------------- next part --------------
Sorry, changesfile not available.