Ubuntu
scponly package

  1. Bug #185035
  2. Comment #6

Comment 6 for bug 185035

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

scponly (4.6-1etch1build0.6.06.1) dapper-security; urgency=low

  * fake sync from Debian

scponly (4.6-1etch1) stable-security; urgency=high

  * Non-maintainer upload by the Security Team
  * Remove rsync, Subversion and Unison support because it was possible
    to gain shell access through them (CVE-2007-6350). Closes: #437148.
  * scp: -o and -F options are dangerous (CVE-2007-6415).

 -- Jamie Strandboge < <email address hidden>> Wed, 07 Oct 2009 07:47:50 -0500