Bug#767227: CVE request: lsyncd command injection

2014-11-19 Thread cve-assign
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > There is a command injection flaw in lsyncd, a file change monitoring > and synchronization daemon: > > https://github.com/axkibe/lsyncd/issues/220 > > https://github.com/creshal/lsyncd/commit/18f02ad013b41a72753912155ae2ba72f2a53e52 > > https://b

Bug#767227: CVE request: lsyncd command injection

2014-11-18 Thread Murray McAllister
Good morning, There is a command injection flaw in lsyncd, a file change monitoring and synchronization daemon: https://github.com/axkibe/lsyncd/issues/220 https://github.com/creshal/lsyncd/commit/18f02ad013b41a72753912155ae2ba72f2a53e52 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=7672