FEDORA-EPEL-2014-3041 — security update for rssh

stable

rssh-2.3.4-1.el5

FEDORA-EPEL-2014-3041 created by xavierb 8 years ago for Fedora EPEL 5

Update to 2.3.4 :
CVE-2012-3478: Improper filtering of environment variables.
CVE-2012-2251: Incorrect filtering of rsync command line.
CVE-2012-2252: Incorrect filtering of --rsh option.

This update has been submitted for testing by xavierb.

8 years ago

This update is currently being pushed to the Fedora EPEL 5 testing updates repository.

8 years ago

This update has been pushed to testing

8 years ago

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

8 years ago

This update has been submitted for stable by xavierb.

8 years ago

This update is currently being pushed to the Fedora EPEL 5 stable updates repository.

8 years ago

This update has been pushed to stable

8 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

rssh-2.3.4-1.el5

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

modified

8 years ago

BZ#820416 CVE-2012-3478 rssh: possible circumvention of rssh restrictions [epel-all]

BZ#878113 rssh doesn't accept rsync

BZ#880989 CVE-2012-2251 rssh: bypass of rsync -e option filtering [epel-6]

BZ#880992 CVE-2012-2252 rssh: incorrect filtering of rsync --rsh command line option [epel-all]

rssh-2.3.4-1.el5

Automated Test Results

None