FEDORA-EPEL-2014-3024 — security update for rssh

stable

rssh-2.3.4-1.el6

FEDORA-EPEL-2014-3024 created by xavierb 10 years ago for Fedora EPEL 6

Update to 2.3.4 :
CVE-2012-3478: Improper filtering of environment variables.
CVE-2012-2251: Incorrect filtering of rsync command line.
CVE-2012-2252: Incorrect filtering of --rsh option.

This update has been submitted for testing by xavierb.

10 years ago

This update is currently being pushed to the Fedora EPEL 6 testing updates repository.

10 years ago

This update has been pushed to testing

10 years ago

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

10 years ago

This update has been submitted for stable by xavierb.

10 years ago

This update is currently being pushed to the Fedora EPEL 6 stable updates repository.

10 years ago

This update has been pushed to stable

10 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

10 years ago

in testing

10 years ago

in stable

10 years ago

Builds

rssh-2.3.4-1.el6

BZ#820416 CVE-2012-3478 rssh: possible circumvention of rssh restrictions [epel-all]

BZ#880989 CVE-2012-2251 rssh: bypass of rsync -e option filtering [epel-6]

BZ#880992 CVE-2012-2252 rssh: incorrect filtering of rsync --rsh command line option [epel-all]

rssh-2.3.4-1.el6

Automated Test Results

None