Ubuntu
rssh package

rssh 2.3.4-4+deb8u2ubuntu0.16.04.1 source package in Ubuntu

Changelog

rssh (2.3.4-4+deb8u2ubuntu0.16.04.1) xenial-security; urgency=medium

  * SECURITY REGRESSION: The fix for the scp security vulneraability
    in 2.3.4-4+deb8u2build0.16.04.1 introduced a regression that
    blocked scp of multiple files from a server using rssh.  Based on
    further analysis of scp's command-line parsing, relax the check
    to require the server command contain -f or -t, which should
    deactivate scp's support for remote files.  (Closes: #921655)
    - Merged from Debian, thanks to Russ Allbery for the patch.

 -- Steve Beattie <email address hidden>  Mon, 11 Feb 2019 16:46:53 -0800

Upload details

Uploaded by:
Steve Beattie
Uploaded to:
Xenial
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
net
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
rssh_2.3.4.orig.tar.gz 110.7 KiB f30c6a760918a0ed39cf9e49a49a76cb309d7ef1c25a66e77a41e2b1d0b40cd9
rssh_2.3.4-4+deb8u2ubuntu0.16.04.1.debian.tar.xz 29.2 KiB 5fafd1cafbed033f5a9846358a372c898cf6c4d72912221a44184be1bfd7389a
rssh_2.3.4-4+deb8u2ubuntu0.16.04.1.dsc 1.9 KiB 1aa58875ca64ab814646e0633dd3b04950fdfaf181389722b626161af4c9b904

View changes file

Binary packages built by this source

rssh: Restricted shell allowing scp, sftp, cvs, svn, rsync or rdist

 rssh is a restricted shell, used as a login shell, that allows users to
 perform only scp, sftp, cvs, svnserve (Subversion), rdist, and/or rsync
 operations. It can also optionally chroot user logins into a restricted
 jail.

rssh-dbgsym: debug symbols for package rssh

 rssh is a restricted shell, used as a login shell, that allows users to
 perform only scp, sftp, cvs, svnserve (Subversion), rdist, and/or rsync
 operations. It can also optionally chroot user logins into a restricted
 jail.