oss-sec mailing list archives

CVE request: lsyncd command injection

From: Murray McAllister <mmcallis () redhat com>
Date: Wed, 19 Nov 2014 11:13:52 +1100

Good morning,

There is a command injection flaw in lsyncd, a file change monitoringand synchronization daemon:


https://github.com/axkibe/lsyncd/issues/220

https://github.com/creshal/lsyncd/commit/18f02ad013b41a72753912155ae2ba72f2a53e52

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=767227

Could a CVE please be assigned?

Thanks,

--
Murray McAllister / Red Hat Product Security

Current thread:

CVE request: lsyncd command injection Murray McAllister (Nov 18)
- Re: CVE request: lsyncd command injection cve-assign (Nov 19)
  - Re: Re: CVE request: lsyncd command injection Michael Samuel (Nov 21)
  - Re: Re: CVE request: lsyncd command injection Ángel González (Nov 25)
    - Re: Re: CVE request: lsyncd command injection Sven Schwedas (Nov 26)