CVE-2014-8990

CVE-2014-8990 affects Lsyncd up to version 2.1.5, where default-rsyncssh.lua does insufficient sanitising of filenames, allowing remote attackers to execute arbitrary commands via shell metacharacters embedded in a filename. The vulnerability is a remote code execution risk tied to how Lsyncd pro...

[SECURITY] Fedora 20 Update: lsyncd-2.1.4-4.fc20.1

Lsyncd watches a local directory trees event monitor interface inotify. It aggregates and combines events for a few seconds and then spawns one or more processes to synchronize the changes. By default this is rsync. Lsyncd is thus a light-weight live mirror solution that is comparatively easy to...

Fedora Update for lsyncd FEDORA-2014-15393

Check the version of lsyncd SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868538";...

Fedora 20 : lsyncd-2.1.4-4.fc20.1 (2014-15393)

Fix bad shell argument escaping Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora Update for lsyncd FEDORA-2014-15373

Check the version of lsyncd SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868541";...

Fedora 19 : lsyncd-2.1.4-4.fc19.1 (2014-15373)

Fix bad shell argument escaping Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...