cvs (2:1.12.13+real-12ubuntu0.1) trusty-security; urgency=medium * SECURITY UPDATE: SSH command injection via -o - src/rsh-client.c: fix argument parsing - CVE-2017-12836 -- <email address hidden> (Leonidas S. Barbosa) Thu, 17 Aug 2017 10:52:05 -0300