[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

[SECURITY] Fedora 8 Update: scponly-4.6-10.fc8



--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1743
2008-02-15 21:20:40
--------------------------------------------------------------------------------

Name        : scponly
Product     : Fedora 8
Version     : 4.6
Release     : 10.fc8
URL         : http://sublimation.org/scponly/
Summary     : Restricted shell for ssh based file services
Description :
scponly is an alternative 'shell' for system administrators
who would like to provide access to remote users to both
read and write local files without providing any remote
execution priviledges. Functionally, it is best described
as a wrapper to the "tried and true" ssh suite of applications.

--------------------------------------------------------------------------------
ChangeLog:

* Wed Feb 13 2008 Tomas Hoger <thoger redhat com> - 4.6-10
- Add patch to prevent restriction bypass using OpenSSH's scp options -F
  and -o (CVE-2007-6415, #426072)
* Mon Feb 11 2008 Warren Togami <wtogami redhat com> - 4.6-9
- rebuild with gcc-4.3
* Tue Dec 11 2007 Toshio Kuratomi <a badger gmail com> - 4.6-8
- Disable rsync support due to security concerns: RH BZ#418201
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #418201 - CVE-2007-6350 scponly: rsync, svn and unison support may be dangerous
        https://bugzilla.redhat.com/show_bug.cgi?id=418201
  [ 2 ] Bug #426072 - CVE-2007-6415 scponly: scp restriction bypass
        https://bugzilla.redhat.com/show_bug.cgi?id=426072
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update scponly' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]