[ubuntu/xenial-security] rssh 2.3.4-4+deb8u2ubuntu0.16.04.1 (Accepted)

Steve Beattie sbeattie at ubuntu.com
Tue Feb 12 03:24:25 UTC 2019


rssh (2.3.4-4+deb8u2ubuntu0.16.04.1) xenial-security; urgency=medium

  * SECURITY REGRESSION: The fix for the scp security vulneraability
    in 2.3.4-4+deb8u2build0.16.04.1 introduced a regression that
    blocked scp of multiple files from a server using rssh.  Based on
    further analysis of scp's command-line parsing, relax the check
    to require the server command contain -f or -t, which should
    deactivate scp's support for remote files.  (Closes: #921655)
    - Merged from Debian, thanks to Russ Allbery for the patch.

Date: 2019-02-12 03:05:12.158828+00:00
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
https://launchpad.net/ubuntu/+source/rssh/2.3.4-4+deb8u2ubuntu0.16.04.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the Xenial-changes mailing list