[SECURITY] Fedora 8 Update: scponly-4.6-10.fc8

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1743
2008-02-15 21:20:40
--------------------------------------------------------------------------------

Name        : scponly
Product     : Fedora 8
Version     : 4.6
Release     : 10.fc8
URL         : http://sublimation.org/scponly/
Summary     : Restricted shell for ssh based file services
Description :
scponly is an alternative 'shell' for system administrators
who would like to provide access to remote users to both
read and write local files without providing any remote
execution priviledges. Functionally, it is best described
as a wrapper to the "tried and true" ssh suite of applications.

--------------------------------------------------------------------------------
ChangeLog:

* Wed Feb 13 2008 Tomas Hoger <thoger at redhat.com> - 4.6-10
- Add patch to prevent restriction bypass using OpenSSH's scp options -F
  and -o (CVE-2007-6415, #426072)
* Mon Feb 11 2008 Warren Togami <wtogami at redhat.com> - 4.6-9
- rebuild with gcc-4.3
* Tue Dec 11 2007 Toshio Kuratomi <a.badger at gmail.com> - 4.6-8
- Disable rsync support due to security concerns: RH BZ#418201
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #418201 - CVE-2007-6350 scponly: rsync, svn and unison support may be dangerous
        https://bugzilla.redhat.com/show_bug.cgi?id=418201
  [ 2 ] Bug #426072 - CVE-2007-6415 scponly: scp restriction bypass
        https://bugzilla.redhat.com/show_bug.cgi?id=426072
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update scponly' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------