UbuntuUpdates.org

Package "rssh"

Name: rssh

Description:

Restricted shell allowing scp, sftp, cvs, svn, rsync or rdist
Latest version: 2.3.4-4+deb8u2ubuntu0.14.04.1
Release: trusty (14.04)
Level: security
Repository: universe
Homepage: http://www.pizzashack.org/rssh/

Links

Save this URL for the latest version of "rssh": https://www.ubuntuupdates.org/rssh

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "rssh"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "rssh" in Trusty

Repository Area Version
base universe 2.3.4-4
updates universe 2.3.4-4+deb8u2ubuntu0.14.04.1

Changelog

Version: 2.3.4-4+deb8u2ubuntu0.14.04.1 2019-02-12 04:09:16 UTC

  rssh (2.3.4-4+deb8u2ubuntu0.14.04.1) trusty-security; urgency=medium

  * SECURITY REGRESSION: The fix for the scp security vulnerability
    in 2.3.4-4+deb8u2build0.14.04.1 introduced a regression that
    blocked scp of multiple files from a server using rssh. Based on
    further analysis of scp's command-line parsing, relax the check
    to require the server command contain -f or -t, which should
    deactivate scp's support for remote files. (Closes: #921655)
    - Merged from Debian, thanks to Russ Allbery for the patch.

 -- Steve Beattie <email address hidden> Mon, 11 Feb 2019 17:24:20 -0800
Source diff to previous version
921655 rssh 2.3.4-4+deb8u2 breaks download of multiple files. - Debian Bug report logs

Version: 2.3.4-4+deb8u2build0.14.04.1 2019-02-08 01:07:35 UTC

  rssh (2.3.4-4+deb8u2build0.14.04.1) trusty-security; urgency=medium

  * fake sync from Debian
Source diff to previous version

Version: 2.3.4-4+deb8u1build0.14.04.1 2019-02-06 16:08:01 UTC

  rssh (2.3.4-4+deb8u1build0.14.04.1) trusty-security; urgency=medium

  * fake sync from Debian


About   -   Send Feedback to @ubuntu_updates