sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] [Fwd: RSync Security Advisory]

From: Niki Guldbrand <niki AT lunar-linux.org>
To: SourceMage Security List <sm-security AT lists.ibiblio.org>
Subject: [SM-Security] [Fwd: RSync Security Advisory]
Date: Thu, 04 Dec 2003 10:46:27 +0100

Hi All.

If you haven't heard about this please read the attachement, and update
your rsync spell.

Niki

--- Begin Message ---

From: Niki Guldbrand <niki AT lunar-linux.org>

To: Lunar Linux Mailing List! <lunar AT lunar-linux.org>

Subject: RSync Security Advisory

Date: Thu, 04 Dec 2003 10:44:58 +0100

Hi All.

If any of you have a rsync server please update at once (Dbguin has been
updated.)

I have just bumped the version of rsync in moonbase to version 2.5.7
which contains a Heap overflow fix which is belived to have been used to
gain access to the debian systems, and together with the kernel do_brk
bug would give full root access.

See here for more details: http://rsync.samba.org/

Niki

Attachment: signature.asc
Description: This is a digitally signed message part
_______________________________________________
lunar mailing list
lunar AT lunar-linux.org
http://dbguin.lunar-linux.org/mailman/listinfo/lunar

--- End Message ---

Attachment: signature.asc
Description: This is a digitally signed message part

[SM-Security] [Fwd: RSync Security Advisory], Niki Guldbrand, 12/04/2003