Fedora 7 Update: scponly-4.8-1.fc7

updates at fedoraproject.org updates at fedoraproject.org
Wed May 21 11:07:53 UTC 2008


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-3566
2008-05-21 07:11:12
--------------------------------------------------------------------------------

Name        : scponly
Product     : Fedora 7
Version     : 4.8
Release     : 1.fc7
URL         : http://sublimation.org/scponly/
Summary     : Restricted shell for ssh based file services
Description :
scponly is an alternative 'shell' for system administrators
who would like to provide access to remote users to both
read and write local files without providing any remote
execution priviledges. Functionally, it is best described
as a wrapper to the "tried and true" ssh suite of applications.

--------------------------------------------------------------------------------
ChangeLog:

* Mon May  5 2008 Toshio Kuratomi <toshio at fedoraproject.org> - 4.8-1
- Update to 4.8 which has its own version of.  scponly-4.6-CVE-2007-6415.
* Wed Feb 13 2008 Tomas Hoger <thoger at redhat.com> - 4.6-10
- Add patch to prevent restriction bypass using OpenSSH's scp options -F
  and -o (CVE-2007-6415, #426072)
* Mon Feb 11 2008 Warren Togami <wtogami at redhat.com> - 4.6-9
- rebuild with gcc-4.3
* Tue Dec 11 2007 Toshio Kuratomi <a.badger at gmail.com> - 4.6-8
- Disable rsync support due to security concerns: RH BZ#418201
* Tue Aug 21 2007 Warren Togami <wtogami at redhat.com> - 4.6-7
- rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #433436 - Version 4.8 available on SourceForge
        https://bugzilla.redhat.com/show_bug.cgi?id=433436
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update scponly' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------




More information about the Fedora-package-announce mailing list