[slackware-security] curl

New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.77.0-i586-1slack14.2.txz: Upgraded. This update fixes security issues: schannel cipher selection surprise TELNET sta...

rsync bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

rsync bug fix and enhancement update

An update is available for rsync. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

Huawei EulerOS: Security Advisory for rsync (EulerOS-SA-2021-1844)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : rsync (EulerOS-SA-2021-1844)

According to the version of the rsync package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path.CVE-2014-9512 Note that...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/seamonkey-2.53.7.1-i686-1slack14.2.txz: Upgraded. This update contains security fixes and improvements. For more information, see:...

SUSE: Security Advisory (SUSE-SU-2016:2151-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:0173-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:0174-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:0118-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.9.0 : rsync (EulerOS-SA-2021-1748)

According to the version of the rsync package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The recvfiles function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, proceeds with certain file...

EulerOS Virtualization 2.9.1 : rsync (EulerOS-SA-2021-1731)

According to the version of the rsync package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The recvfiles function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, proceeds with certain file...

Huawei EulerOS: Security Advisory for rsync (EulerOS-SA-2021-1731)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for rsync (EulerOS-SA-2021-1748)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] irssi

New irssi packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/irssi-1.2.3-i586-1slack14.2.txz: Upgraded. This update fixes bugs and security issues. See the NEWS file for details...

The vulnerability in the recv_files function of the Rsync file transfer and synchronization utility’s receiver.c module allows a attacker to compromise data integrity.

The vulnerability in the recvfiles function in the receiver.c file of the Rsync file transfer and synchronization utility is related to the lack of checks on the file name. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the data...

The vulnerability in the receive_xattr function of the xattrs.c utility for file transfer and synchronization in Rsync, related to reading beyond the buffer data limit, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the receivexattr function of the xattrs.c utility for transferring and synchronizing files in Rsync relates to the lack of checking for the presence of a trailing dot in the file name. Exploiting this vulnerability could allow an attacker to gain access to confidential data,...

[ASA-202101-1] rsync: man-in-the-middle

Arch Linux Security Advisory ASA-202101-1 ========================================= Severity: High Date : 2021-01-04 CVE-ID : CVE-2020-14387 Package : rsync Type : man-in-the-middle Remote : Yes Link : https://security.archlinux.org/AVG-1374 Summary ======= The package rsync before version 3.2.3-...

Improper Validation Of Certificate

rsync is vulnerable to improper validation of certificate. It does not verify the hostname in the server certificate in openssl mode, so a man-in-the-middle attacker with a valid certificate for another hostname could intercept connections...

Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Analytics System

Summary Redhat provided OpenSSH is used by IBM Integrated Analytics System. This bulletin provides mitigation for the reported CVE. Vulnerability Details CVEID: CVE-2019-6109 DESCRIPTION: OpenSSH could allow a remote attacker to conduct spoofing attacks, caused by missing character encoding in th...