[SECURITY] [DLA 1218-1] rsync security update

🗓️ 22 Dec 2017 23:10:34Reported by DebianType

rsync security update version 3.0.9-4+deb7u1 fixing multiple vulnerabilitie

Reporter	Title	Published	Views	Family All 156
freebsd	rsync -- multiple vulnerabilities	17 Dec 201700:00	–	freebsd
attackerkb	CVE-2017-17433	6 Dec 201703:29	–	attackerkb
attackerkb	CVE-2017-17434	6 Dec 201703:29	–	attackerkb
alpinelinux	CVE-2017-16548	6 Nov 201705:00	–	alpinelinux
alpinelinux	CVE-2017-17433	6 Dec 201703:00	–	alpinelinux
alpinelinux	CVE-2017-17434	6 Dec 201703:00	–	alpinelinux
archlinux	[ASA-201801-21] rsync: multiple issues	29 Jan 201800:00	–	archlinux
bdu_fstec	The vulnerability of the recv_files and read_ndx_and attrs functions in the rsync daemon allows a hacker to circumvent existing access restrictions and compromise the confidentiality, integrity, and accessibility of the protected information.	17 Dec 201900:00	–	bdu_fstec
bdu_fstec	The vulnerability in the receive_xattr function of the xattrs.c utility for file transfer and synchronization in Rsync, related to reading beyond the buffer data limit, allows an attacker to access confidential data, compromise its integrity, and cause service failures.	21 Mar 202100:00	–	bdu_fstec
bdu_fstec	The vulnerability in the recv_files function of the Rsync file transfer and synchronization utility’s receiver.c module allows a attacker to compromise data integrity.	21 Mar 202100:00	–	bdu_fstec