Comment 3 for bug 576440

This bug was fixed in the package lshell - 0.9.12-1

---------------
lshell (0.9.12-1) unstable; urgency=low

  * New upstream release:
    - Corrects a major security bug (overriding path restrictions using
      variable expansion).
    - Adds the ability to allow/forbid upload and/or downloads via SCP.

lshell (0.9.10-1) unstable; urgency=low

  * New upstream release:
    - Corrects major security bugs. (Closes: #572144)
    - Adds a logrotate file.
    - Adds new features.
  * debian/control:
    - Bumped Standards-Version to 3.8.4.
 -- Benjamin Drung <email address hidden> Wed, 05 May 2010 23:12:05 +0200