rssh 2.3.3-6 source package in Debian

Changelog

rssh (2.3.3-6) unstable; urgency=high


  * Fix several flaws in validation of rsync options.  Ensure --server
    cannot be hidden from the server by putting it after -- or as the
    argument to another option.  Verify that the -e option's value matches
    expectations rather than trying to look for invalid -e option values.
    (CVE-2012-2251)
  * Reject the rsync --rsh option even if it does not contain a trailing
    equal sign.  (CVE-2012-2252)

 -- Russ Allbery <email address hidden>  Thu, 22 Nov 2012 12:01:41 -0800

Upload details

Uploaded by:
Russ Allbery
Uploaded to:
Sid
Original maintainer:
Russ Allbery
Architectures:
any
Section:
net
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section
Wheezy release main net

Builds

Downloads

File Size SHA-256 Checksum
rssh_2.3.3-6.dsc 1.4 KiB d5f9d9572e7bdbf03ef05bc9cf774d77e5f87ec794475afd532ba222981b48fd
rssh_2.3.3.orig.tar.gz 116.7 KiB 1940912c2485f8531e4461de06bd2aebc607d2a89805debb7ac81002fa6fd07f
rssh_2.3.3-6.debian.tar.gz 30.6 KiB 647bc002b470e19bb740e69dfb1ab04dae3c56c14248688e215b30df4bb6896d

Available diffs

No changes file available.

Binary packages built by this source