[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: rssh security update breaks rsync via Synology's "hyper backup"



Hi Russ,

> I've not done an LTS security upload before, but it looks from the wiki
> that it uses the same security-master process as stable security updates.
> Please let me know if that's wrong.

This is mostly correct, yep! I made the following the changes to
your jessie diff:

  -  * The fix for the scp security vulneraability in 2.3.4-5+deb9u1
  +  * The fix for the scp security vulnerability in 2.3.4-4+deb8u2

.. and released this as a DLA-1660-2 "regression" update. I will leave
the stable update to the security team.


Best wishes,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org 🍥 chris-lamb.co.uk
       `-


Reply to: