Sophie

Sophie

distrib > Mandriva > 2010.0 > i586 > media > contrib-release > by-pkgid > ee740d952aac4f9441268c3091728f02 > files > 8

rssh-2.3.2-7mdv2010.0.i586.rpm

2.3.2

 - fixed segfault due to checking the length of variables that I forgot to
   remove from build_arg_vector() since the chroot root exploit fix in 2.3.0 

2.3.1

 - fixed stupid bug that caused rssh not to allow rsync and rdist

2.3.0

 - modified chroot_helper to parse the config file, to avoid arbitrary
   chroot() (and thus root compromise)
 - numerous documentation updates
 - fix for va_start()/va_end()-related segfault on 64-bit architecture
 - small bit of code cleanup

2.2.3

 - added checks for command execution arguments to scp, rdist, rsync

2.2.2

 - string formatting bug fixed in log.c
 - small bug processing chroot path fixed in rsshconf.c
 - -v now outputs pre-configured paths of important files
 - extra debugging messages
 - documentation updates for the wordexp() shell problem

2.2.1

 - added missing code for parsing per-user options

2.2.0

 - fixed a security hole where chrooted users could enumerate files outside
   the jail
 - fixed a bug handling sftp-server checking
 - added support for cvs, rdist, and rsync
 - documentation clarifications and updates.
 - added conf_convert.sh to convert old rssh.conf files to new format
 - added mkchroot.sh to set up a chroot jail (mostly for Red Hat systems)
 - reversed the direction of the ChangeLog file...  :)

2.1.1

 - updated build environment to facilitate building RPMs

2.1.0

 - added per-user configuration
 - fixed a number of heretofore unnoticed bugs in the parser and elsewhere
 - added examples to the config file
 - updated documentation

2.0.4

 - fixed quote processing in config file parser
 - fixed command line argvec building for args with spaces
 - cleaned up a number of other little verbiage things, etc.
 - changed default shell opts to allow only scp if config file doesn't exist

2.0.3

 - added SECURITY file to the distribution
 - removed references to scpsh and sftpsh from README
 - changed strcmp in main.c to use PATH_SCP rather than scp
 - made rssh_chroot_helper check # of args, plus minor log mods to support
 - minor fixes in CHROOT hints file
 - actually called umask() to set the umask...
 - added patches to configure.ac for compiling on non-GNU platforms

2.0.2

 - another bug with scp

2.0.1

 - fixed bug preventing scp from working
 - documentation update for using chroot jails
 - updated the INSTALL file with hints for Solaris 

2.0.0

Some code clean-up, and added config file, with support for:

  - setting default umask
  - configuring whether scp and/or sftp are allowed
  - setting the syslog facility to which to log
  - support for chroot jails

...and there was much rejoicing.  All configuration options are currently
global.  In the next major release of rssh, they will be configurable on a
per-user basis (which will override global settings).

Added rssh_chroot_helper for (hopefully) implementing the chroot jail
securely.

1.0.4

minor bug fix

1.0.3

Uh, I forgot to update this, and I don't remember what I changed...  ;-)

1.0.2

Automake support

1.0.1

Added support to configure to check for OpenSSH 3.5, and disables static
compilation if found

1.0.0

Initial release version (non-beta)