Skip to Content.
Sympa Menu

sm-security - [SM-Security] [Fwd: RSync Security Advisory]

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Niki Guldbrand <niki AT lunar-linux.org>
  • To: SourceMage Security List <sm-security AT lists.ibiblio.org>
  • Subject: [SM-Security] [Fwd: RSync Security Advisory]
  • Date: Thu, 04 Dec 2003 10:46:27 +0100

Hi All.


If you haven't heard about this please read the attachement, and update
your rsync spell.


Niki
--- Begin Message ---
  • From: Niki Guldbrand <niki AT lunar-linux.org>
  • To: Lunar Linux Mailing List! <lunar AT lunar-linux.org>
  • Subject: RSync Security Advisory
  • Date: Thu, 04 Dec 2003 10:44:58 +0100
Hi All.

If any of you have a rsync server please update at once (Dbguin has been
updated.)

I have just bumped the version of rsync in moonbase to version 2.5.7
which contains a Heap overflow fix which is belived to have been used to
gain access to the debian systems, and together with the kernel do_brk
bug would give full root access.

See here for more details: http://rsync.samba.org/


Niki

Attachment: signature.asc
Description: This is a digitally signed message part

_______________________________________________
lunar mailing list
lunar AT lunar-linux.org
http://dbguin.lunar-linux.org/mailman/listinfo/lunar

--- End Message ---

Attachment: signature.asc
Description: This is a digitally signed message part



  • [SM-Security] [Fwd: RSync Security Advisory], Niki Guldbrand, 12/04/2003

Archive powered by MHonArc 2.6.24.

Top of Page