tocsin

Debian/lsyncd: unknown

default-rsyncssh.lua in Lsyncd 2.1.5 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a filename.

Action: Upgrade lsyncd to 2.1.5-2 or later.

Affected

introducedfixedlast affected
02.1.5-2-

Fixed versions

2.1.5-2

Sources

published · modified · JSON