[ubuntu/xenial-security] rssh 2.3.4-4+deb8u2ubuntu0.16.04.1 (Accepted)
Steve Beattie
sbeattie at ubuntu.com
Tue Feb 12 03:24:25 UTC 2019
rssh (2.3.4-4+deb8u2ubuntu0.16.04.1) xenial-security; urgency=medium
* SECURITY REGRESSION: The fix for the scp security vulneraability
in 2.3.4-4+deb8u2build0.16.04.1 introduced a regression that
blocked scp of multiple files from a server using rssh. Based on
further analysis of scp's command-line parsing, relax the check
to require the server command contain -f or -t, which should
deactivate scp's support for remote files. (Closes: #921655)
- Merged from Debian, thanks to Russ Allbery for the patch.
Date: 2019-02-12 03:05:12.158828+00:00
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
https://launchpad.net/ubuntu/+source/rssh/2.3.4-4+deb8u2ubuntu0.16.04.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the Xenial-changes
mailing list