FEDORA-2019-e47add6b2b — security update for rssh

stable

rssh-2.3.4-15.fc31

FEDORA-2019-e47add6b2b created by xavierb 5 years ago for Fedora 31

Fix CVE-2019-3463, CVE-2019-3464 and CVE-2019-1000018.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2019-e47add6b2b

This update has been submitted for testing by xavierb.

5 years ago

This update's test gating status has been changed to 'waiting'.

5 years ago

This update's test gating status has been changed to 'ignored'.

5 years ago

This update has been pushed to testing.

5 years ago

This update can be pushed to stable now if the maintainer wishes

5 years ago

This update has been submitted for stable by bodhi.

5 years ago

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

Builds

rssh-2.3.4-15.fc31

BZ#1671295 CVE-2019-1000018 rssh: Possible allowscp bypass resulting in arbitrary code execution [fedora-all]

BZ#1672380 CVE-2019-3463 rssh: rsync bypass resulting in arbitrary code execution [fedora-all]

BZ#1672381 CVE-2019-3463 rssh: rsync bypass resulting in arbitrary code execution [epel-all]

BZ#1672383 CVE-2019-3464 rssh: rsync bypass resulting in arbitrary code execution when built with popt [fedora-all]

rssh-2.3.4-15.fc31

Automated Test Results

ignored