FreeBSD Ports: rsync

The remote host is missing an update to the system as announced in the referenced advisory. VID 9a777c23-b310-11e0-832d-00215c6a37bb OpenVAS Vulnerability Test $ Description: Auto generated from VID 9a777c23-b310-11e0-832d-00215c6a37bb Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

rsync security, bug fix, and enhancement update

3.0.6-4 - fix 700450 - free parsed hostnames - fix 575022 - set TZ variable after chroot 3.0.6-3 - Add upstream patch to fix CVE-2011-1097 - Incremental file-list corruption due to temporary fileextracnt increments Resolves: 688923 3.0.6-2 - Remove BuildRequires dependency on popt-devel, until th...

[slackware-security] dhcpcd

New dhcpcd packages are available for Slackware 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/dhcpcd-5.2.12-i486-1slack13.37.txz: Upgraded. Sanitize the host name provided by the DHCP server to insure that it does...

[slackware-security] libpng

New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/libpng-1.4.8-i486-1slack13.37.txz: Upgraded. Fixed uninitializ...

(RHSA-2011:1090) Moderate: rhev-hypervisor security and bug fix update

The rhev-hypervisor package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine KVM hypervisor. It includes everything necessary to run and manage virtual machines: A subset of the Red...

RedHat Update for rsync RHSA-2011:0999-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 5 : rsync (RHSA-2011:0999)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:0999 advisory. - rsync excluded content access restrictions bypass via symlinks CVE-2007-6200 Note that Nessus has not tested for this issue but has instead relied...

RedHat Update for rsync RHSA-2011:0999-01

Check for the Version of rsync OpenVAS Vulnerability Test RedHat Update for rsync RHSA-2011:0999-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Moderate: Red Hat Security Advisory: rsync security, bug fix, and enhancement update

An updated rsync package that fixes one security issue, several bugs, and adds enhancements is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...

rsync excluded content access restrictions bypass via symlinks

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, excludefrom, and filter and read or write hidden files via 1 symlink, 2 partial-dir, 3 backup-dir, and unspecified 4 dest options...

FreeBSD : rsync -- incremental recursion memory corruption vulnerability (9a777c23-b310-11e0-832d-00215c6a37bb)

rsync development team reports : Fixed a data-corruption issue when preserving hard-links without preserving file ownership, and doing deletions either before or during the transfer CVE-2011-1097. This fixes some assert errors in the hard-linking code, and some potential failed checksums via -c...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/seamonkey-2.2-i486-1slack13.37.txz: Upgraded. This update contains security fixes and improvements. For more information, see:...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/mozilla-firefox-5.0-i486-1slack13.37.txz: Upgraded. This release contains security fixes and improvements. For...

Ubuntu 9.10 / 10.04 LTS / 10.10 : rsync vulnerability (USN-1124-1)

It was discovered that rsync incorrectly handled memory when certain recursion, deletion and ownership options were used. If a user were tricked into connecting to a malicious server, a remote attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking...

Ubuntu: Security Advisory (USN-1124-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for rsync USN-1124-1

Ubuntu Update for Linux kernel vulnerabilities USN-1124-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11241.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for rsync USN-1124-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

SuSE 11.1 Security Update : rsync (SAT Patch Number 4300)

Specially crafted requests could cause a memory corruption on the receiving side of an rsync transfer client side or server that allows to push CVE-2011-1097. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : rsync (openSUSE-SU-2011:0441-1)

Specially crafted requests could cause a memory corruption on the receiving side of an rsync transfer client side or server that allows to push CVE-2011-1097. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

USN-1124-1: rsync vulnerability

It was discovered that rsync incorrectly handled memory when certain recursion, deletion and ownership options were used. If a user were tricked into connecting to a malicious server, a remote attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking...

rsync memory corruption

Memory corruption on server reply parsing...