DragonFly commits List (threaded) for 2008-04
DragonFly BSD
DragonFly commits List (threaded) for 2008-04
[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]

Re: cvs commit: src/crypto/openssh-4 session.c


From: Matthew Dillon <dillon@xxxxxxxxxxxxxxxxxxxx>
Date: Sat, 19 Apr 2008 08:57:13 -0700 (PDT)

:pavalos     2008/04/19 08:02:52 PDT
:
:DragonFly src repository
:
:  Modified files:        (Branch: DragonFly_RELEASE_1_12)
:    crypto/openssh-4     session.c 
:  Log:
:  Fix for CVE-2008-1657:
:  
:  "OpenSSH before 4.9 allows remote authenticated users to bypass the
:  sshd_config ForceCommand directive by modifying the .ssh/rc session file."

    Great, we'll include this in 1.12.2 as well.

					-Matt
					Matthew Dillon 
					<dillon@backplane.com>



[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]