- Committer: Package Import Robot
- Date: 2012-11-22 12:01:41 UTC
- Revision ID: package-import@ubuntu.com-20121122120141-fptmwkheajahgcvj
* Fix several flaws in validation of rsync options. Ensure --server
cannot be hidden from the server by putting it after -- or as the
argument to another option. Verify that the -e option's value matches
expectations rather than trying to look for invalid -e option values.
(CVE-2012-2251)
* Reject the rsync --rsh option even if it does not contain a trailing
equal sign. (CVE-2012-2252)
cannot be hidden from the server by putting it after -- or as the
argument to another option. Verify that the -e option's value matches
expectations rather than trying to look for invalid -e option values.
(CVE-2012-2251)
* Reject the rsync --rsh option even if it does not contain a trailing
equal sign. (CVE-2012-2252)
| Filename | Latest Rev | Last Changed | Committer | Comment | Size | ||
|---|---|---|---|---|---|---|---|
 .. |
|||||||
.pc
|
9 | 14 years ago | Bazaar Package Importer | * Switch to 3.0 (quilt) source format. - Remove |
|
||
|
debian
|
2 | 20 years ago | Bazaar Package Importer | Corrected dependency on ssh-krb5 (Closes: #232575) |
|
||
aclocal.m4 |
1.1.5 | 13 years ago | Bazaar Package Importer | Import upstream version 2.3.3 | 34.2 KB |
|
|
|
argvec.c |
1.1.4 | 18 years ago | Bazaar Package Importer | Import upstream version 2.3.2 | 3.8 KB |
|
|
|
argvec.h |
1.1.4 | 18 years ago | Bazaar Package Importer | Import upstream version 2.3.2 | 1.5 KB |
|
|
|
AUTHORS |
1.1.1 | 19 years ago | Bazaar Package Importer | Import upstream version 2.2.2 | 63 bytes |
|
|
|
ChangeLog |
1.1.5 | 13 years ago | Bazaar Package Importer | Import upstream version 2.3.3 | 3.3 KB |
|
|
|
CHROOT |
4.1.2 | 18 years ago | Bazaar Package Importer | * New upstream release. * This package is a securi | 11.1 KB |
|
|
|
conf_convert |
9 | 14 years ago | Bazaar Package Importer | * Switch to 3.0 (quilt) source format. - Remove | 1.2 KB |
|
|
|
config.h.in |
1 | 20 years ago | Bazaar Package Importer | Import upstream version 2.1.1 | 2.4 KB |
|
|
configure |
1.1.5 | 13 years ago | Bazaar Package Importer | Import upstream version 2.3.3 | 212 KB |
|
|
|
configure.ac |
12 | 13 years ago | Bazaar Package Importer | * New upstream release. - Exit with non-zero sta | 6.2 KB |
|
|
|
COPYING |
1 | 20 years ago | Bazaar Package Importer | Import upstream version 2.1.1 | 1.4 KB |
|
|
|
depcomp |
1 | 20 years ago | Bazaar Package Importer | Import upstream version 2.1.1 | 11.8 KB |
|
|
|
INSTALL |
1.1.1 | 19 years ago | Bazaar Package Importer | Import upstream version 2.2.2 | 3.7 KB |
|
|
|
install-sh |
1 | 20 years ago | Bazaar Package Importer | Import upstream version 2.1.1 | 5.4 KB |
|
|
|
LICENSE |
1.1.4 | 18 years ago | Bazaar Package Importer | Import upstream version 2.3.2 | 1.3 KB |
|
|
|
log.c |
1.1.4 | 18 years ago | Bazaar Package Importer | Import upstream version 2.3.2 | 5.1 KB |
|
|
|
log.h |
1 | 20 years ago | Bazaar Package Importer | Import upstream version 2.1.1 | 1.7 KB |
|
|
|
main.c.in |
16 | 11 years ago | Package Import Robot | Apply upstream patch to close security vulnerabili | 7.8 KB |
|
|
|
Makefile.am |
1.1.4 | 18 years ago | Bazaar Package Importer | Import upstream version 2.3.2 | 1 KB |
|
|
|
Makefile.in |
1.1.5 | 13 years ago | Bazaar Package Importer | Import upstream version 2.3.3 | 29.2 KB |
|
|
|
missing |
1 | 20 years ago | Bazaar Package Importer | Import upstream version 2.1.1 | 10 KB |
|
|
|
mkchroot.sh |
13 | 12 years ago | Package Import Robot | * Update examples/mkchroot.sh to include libnss mo | 7.1 KB |
|
|
|
mkinstalldirs |
1 | 20 years ago | Bazaar Package Importer | Import upstream version 2.1.1 | 1.7 KB |
|
|
|
NEWS |
1.1.3 | 18 years ago | Bazaar Package Importer | Import upstream version 2.3.0 | 66 bytes |
|
|
|
pathnames.h.in |
9 | 14 years ago | Bazaar Package Importer | * Switch to 3.0 (quilt) source format. - Remove | 1.9 KB |
|
|
|
README |
1.1.2 | 19 years ago | Bazaar Package Importer | Import upstream version 2.2.3 | 1.5 KB |
|
|
|
rssh.1 |
12 | 13 years ago | Bazaar Package Importer | * New upstream release. - Exit with non-zero sta | 13.9 KB |
|
|
|
rssh.conf |
9 | 14 years ago | Bazaar Package Importer | * Switch to 3.0 (quilt) source format. - Remove | 1.8 KB |
|
|
|
rssh.conf.5 |
12 | 13 years ago | Bazaar Package Importer | * New upstream release. - Exit with non-zero sta | 5.3 KB |
|
|
|
rssh.conf.5.in |
12 | 13 years ago | Bazaar Package Importer | * New upstream release. - Exit with non-zero sta | 5.3 KB |
|
|
|
rssh.h |
9 | 14 years ago | Bazaar Package Importer | * Switch to 3.0 (quilt) source format. - Remove | 1.8 KB |
|
|
|
rssh.spec |
1.1.5 | 13 years ago | Bazaar Package Importer | Import upstream version 2.3.3 | 1.1 KB |
|
|
|
rssh.spec.in |
1.1.1 | 19 years ago | Bazaar Package Importer | Import upstream version 2.2.2 | 1.1 KB |
|
|
|
rssh_chroot_helper.c |
9 | 14 years ago | Bazaar Package Importer | * Switch to 3.0 (quilt) source format. - Remove | 8 KB |
|
|
|
rsshconf.c |
12 | 13 years ago | Bazaar Package Importer | * New upstream release. - Exit with non-zero sta | 30.8 KB |
|
|
|
rsshconf.h |
1.1.4 | 18 years ago | Bazaar Package Importer | Import upstream version 2.3.2 | 1.9 KB |
|
|
|
SECURITY |
1.1.3 | 18 years ago | Bazaar Package Importer | Import upstream version 2.3.0 | 9.8 KB |
|
|
|
TODO |
1 | 20 years ago | Bazaar Package Importer | Import upstream version 2.1.1 | 46 bytes |
|
|
|
util.c |
17 | 11 years ago | Package Import Robot | * Fix several flaws in validation of rsync options | 12.7 KB |
|
|
|
util.h |
16 | 11 years ago | Package Import Robot | Apply upstream patch to close security vulnerabili | 1.9 KB |
|
|