Bug#350964: CVE-2006-0225, scponly shell command possible

2006-04-07 Thread Moritz Muehlenhoff
Thomas Wana wrote: > > Just like to bring bug #350964 back to the limelight. Briefly recapping > > > > Feb 2, I created the bug report > > Feb 6, unstable fixed by Thomas > > Feb 13 DSA 969-1 released > > Feb 15 I questioned if sarge fixed, Thomas, Joey and Steve respond/discuss. > > > > At the m

Bug#350964: CVE-2006-0225, scponly shell command possible

2006-04-05 Thread Thomas Wana
Hi, Geoff Crompton wrote: > Just like to bring bug #350964 back to the limelight. Briefly recapping > > Feb 2, I created the bug report > Feb 6, unstable fixed by Thomas > Feb 13 DSA 969-1 released > Feb 15 I questioned if sarge fixed, Thomas, Joey and Steve respond/discuss. > > At the moment it

Bug#350964: CVE-2006-0225, scponly shell command possible

2006-03-27 Thread Geoff Crompton
Just like to bring bug #350964 back to the limelight. Briefly recapping Feb 2, I created the bug report Feb 6, unstable fixed by Thomas Feb 13 DSA 969-1 released Feb 15 I questioned if sarge fixed, Thomas, Joey and Steve respond/discuss. At the moment it looks like Thomas is suggesting that DSA 9

Bug#350964: CVE-2006-0225, scponly shell command possible

2006-02-15 Thread Thomas Wana
Steve Kemp wrote: > On Wed, Feb 15, 2006 at 02:01:51PM +1100, Geoff Crompton wrote: > > >>This bug has been closed for unstable (see bug 350964) with the 4.6 >>upload, but will it be fixed for sarge? > > > Please see DSA-969-1 released two days ago: > > http://www.us.debian.org/security/

Bug#350964: CVE-2006-0225, scponly shell command possible

2006-02-15 Thread Steve Kemp
On Wed, Feb 15, 2006 at 02:01:51PM +1100, Geoff Crompton wrote: > This bug has been closed for unstable (see bug 350964) with the 4.6 > upload, but will it be fixed for sarge? Please see DSA-969-1 released two days ago: http://www.us.debian.org/security/2006/dsa-969 Sarge is fixed. Ste

Bug#350964: CVE-2006-0225, scponly shell command possible

2006-02-14 Thread Martin Schulze
Thomas Wana wrote: > Hi, > > Geoff Crompton wrote: > >This bug has been closed for unstable (see bug 350964) with the 4.6 > >upload, but will it be fixed for sarge? > > > > Joey: I sent you a patch for that, but it seems you didn't > include this in scponly-4.0sarge1. We also had no discussion >

Bug#350964: CVE-2006-0225, scponly shell command possible

2006-02-14 Thread Thomas Wana
Hi, Geoff Crompton wrote: This bug has been closed for unstable (see bug 350964) with the 4.6 upload, but will it be fixed for sarge? Joey: I sent you a patch for that, but it seems you didn't include this in scponly-4.0sarge1. We also had no discussion about wether to include it or not. Plea

Bug#350964: CVE-2006-0225, scponly shell command possible

2006-02-14 Thread Geoff Crompton
This bug has been closed for unstable (see bug 350964) with the 4.6 upload, but will it be fixed for sarge? -- Geoff Crompton Debian System Administrator Strategic Data +61 3 9340 9000 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTEC