-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 22 Nov 2012 12:34:38 -0800 Source: rssh Binary: rssh Architecture: source i386 Version: 2.3.2-13squeeze3 Distribution: stable-security Urgency: high Maintainer: Russ Allbery <rra@debian.org> Changed-By: Russ Allbery <rra@debian.org> Description: rssh - Restricted shell allowing scp, sftp, cvs, svn, rsync or rdist Changes: rssh (2.3.2-13squeeze3) stable-security; urgency=high . * Reject the rsync --rsh option even if it does not contain a trailing equal sign. (CVE-2012-2252) Checksums-Sha1: eb0c0a198b79dc22bb5c2bc46ab019e2b557d849 1457 rssh_2.3.2-13squeeze3.dsc 9a7fcef807a73ed73480af7a00f5380c85f6b0fd 31251 rssh_2.3.2-13squeeze3.debian.tar.gz 878a476ac50cde999ae2f4a104e338b0873e91b3 59428 rssh_2.3.2-13squeeze3_i386.deb Checksums-Sha256: f89ebfa8244f1445f816771d277ccbb10825c2070a9980057e428bd865c74aed 1457 rssh_2.3.2-13squeeze3.dsc 46c6fb4ef86884bb04f964c835350d06059ce8345df582cbc3d8f9af9805445c 31251 rssh_2.3.2-13squeeze3.debian.tar.gz e84bf98d150c90e7191b05e51410ee7316008e1ab454e7d213270cd89e05de8a 59428 rssh_2.3.2-13squeeze3_i386.deb Files: 0b4d585c54517477190f975d719bfa73 1457 net optional rssh_2.3.2-13squeeze3.dsc e4892f9ec93288dc869ca35eece25d5d 31251 net optional rssh_2.3.2-13squeeze3.debian.tar.gz be9d181a18dcf14eec49be28fbada560 59428 net optional rssh_2.3.2-13squeeze3_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBCAAGBQJQrpk8AAoJEH2AMVxXNt514BMH/2OVdCfdGsgfB5BWjC4fMeXY hatPPCLM8KoEepTMubK5EoDr9k1QhvhaoYdLprNmc0t4D1Co6XrutUwX6CupB0dr rfDcdyvjSymqDHg0g4gy2mSLHdaLgNev9NDWsf8G++jKgeDnZ2k+qzZs7Y/nFOae fN9Zfu8pprHt6f2HmuByhTFV42NKaA92WWJg544CbqGmR251FRRkbgM5Nt3axG7v 4s4ll536QdrqxkxyT8Ad2owXKnjJtPkVzMkr4YIBjExn/NHfU+9ryXO3OO5oVEy5 X8wgmKvmwx1LiVSue3AdIzI8YfwP1Tis58Lrl6296+jdCNOFgx7XW00Te5Xrnhk= =auOx -----END PGP SIGNATURE-----