2818 matches found
CLSA-2022-1660761395 Fix CVE(s): CVE-2022-29154
SECURITY UPDATE: arbitrary file write vulnerability via malicious rysnc server MITM attack - debian/patches/CVE-2022-29154.patch: add extra file-list safety checks. - CVE-2022-29154 Fix noatime patch to build the testsuite and enable it in debian/rules...
CLSA-2022-1660759162 Fixed CVE-2022-29154 in rsync
CVE-2022-29154: fix arbitrary file write vulnerability via malicious rysnc server MITM attack - Add '%check unset DISPLAY ' section but disable broken 'daemon' and 'hardlinks' tests...
CLSA-2022-1660759048 Fixed CVE-2022-29154 in rsync
CVE-2022-29154: fix arbitrary file write vulnerability via malicious rysnc server MITM attack...
CLSA-2022-1660756974 Fixed CVE-2022-29154 in rsync
CVE-2022-29154: fix arbitrary file write vulnerability via malicious rysnc server MITM attack...
openSUSE: Security Advisory for rsync (SUSE-SU-2022:2825-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : rsync (SUSE-SU-2022:2825-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:2825-1 advisory. - CVE-2022-29154: Fixed an arbitrary file write when connecting to a malicious server bsc1201840. Tenable...
SUSE: Security Advisory (SUSE-SU-2022:2825-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2022:2825-1 Security update for rsync
This update for rsync fixes the following issues: - CVE-2022-29154: Fixed an arbitrary file write when connecting to a malicious server bsc1201840...
Slackware: Security Advisory (SSA:2022-227-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[slackware-security] rsync
New rsync packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/rsync-3.2.5-i586-1slack15.0.txz: Upgraded. Added some file-list safety checking that helps to ensure that a rogue...
Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current rsync Vulnerability (SSA:2022-227-01)
The version of rsync installed on the remote host is prior to 3.2.5. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-227-01 advisory. - An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories of...
FreeBSD : rsync -- client-side arbitrary file write vulnerability (21f43976-1887-11ed-9911-40b034429ecf)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 21f43976-1887-11ed-9911-40b034429ecf advisory. - An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary...
An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories of connecting peers. The server chooses which files/directories are sent to the client. However the rsync client performs insufficient validation of file names. A malicious rsync server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the rsync client target directory and subdirectories (for example overwrite the .ssh/authorized_keys file).
...
Directory Traversal
rsync is vulnerable to Directory Traversal. The vulnerability exists due to a lack of validation of file names allowed, allowing a malicious rsync server or Man-in-The-Middle attacker to overwrite arbitrary files in the rsync client target directory and subdirectories...
Important Photon OS Security Update - PHSA-2022-0430
Updates of 'rsync' packages of Photon OS have been released...
CVE-2022-37434
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call...
Important Photon OS Security Update - PHSA-2022-0503
Updates of 'rsync' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2022-3.0-0430
Updates of 'rsync' packages of Photon OS have been released...