rssh (2.3.4-4+deb8u2ubuntu0.16.04.1) xenial-security; urgency=medium
* SECURITY REGRESSION: The fix for the scp security vulneraability
in 2.3.4-4+deb8u2build0.16.04.1 introduced a regression that
blocked scp of multiple files from a server using rssh. Based on
further analysis of scp's command-line parsing, relax the check
to require the server command contain -f or -t, which should
deactivate scp's support for remote files. (Closes: #921655)
- Merged from Debian, thanks to Russ Allbery for the patch.
Date: 2019-02-12 03:05:12.158828+00:00
Changed-By: Steve Beattie <sbeat...@ubuntu.com>
https://launchpad.net/ubuntu/+source/rssh/2.3.4-4+deb8u2ubuntu0.16.04.1
Sorry, changesfile not available.
--
Xenial-changes mailing list
Xenial-changes@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/xenial-changes
