Package name
rsync
Date
2004-08-17
Advisory ID
MDKSA-2004:083
Affected versions
9.2 amd64 , CS2.1 x86_64 , 10.0 amd64 , CS2.1 i586 , 10.0 i586 , 9.2 i586 , 9.1 i586 , MNF8.2 i586 , 9.1 i586

Problem description

An advisory was sent out by the rsync team regarding a security vulnerability in all versions of rsync prior to and including 2.6.2. If rsync is running in daemon mode, and not in a chrooted environment, it is possible for a remote attacker to trick rsyncd into creating an absolute pathname while sanitizing it. This vulnerability allows a remote attacker to possibly read/write to/from files outside of the rsync directory. The updated packages are patched to prevent this problem.

Updated packages

9.2 amd64

 06e06a5c39ecdeec4780c7026041f339  amd64/9.2/RPMS/rsync-2.5.7-0.3.92mdk.amd64.rpm
b98e8c0684ab6dd8b9f30b45de076e95  amd64/9.2/SRPMS/rsync-2.5.7-0.3.92mdk.src.rpm

CS2.1 x86_64

 0007ae94030d0b6ee773170deb30d867  x86_64/corporate/2.1/RPMS/rsync-2.5.5-5.3.C21mdk.x86_64.rpm
61cf910f7e318be0b3b247ce0568b09c  x86_64/corporate/2.1/SRPMS/rsync-2.5.5-5.3.C21mdk.src.rpm

10.0 amd64

 20a09fc79f54be4c14c09bc4bb9652fe  amd64/10.0/RPMS/rsync-2.6.0-1.2.100mdk.amd64.rpm
094ec110689e485c178adf3310e7e86e  amd64/10.0/SRPMS/rsync-2.6.0-1.2.100mdk.src.rpm

CS2.1 i586

 4de66f34494f397f921cb364aeeaa162  corporate/2.1/RPMS/rsync-2.5.5-5.3.C21mdk.i586.rpm
61cf910f7e318be0b3b247ce0568b09c  corporate/2.1/SRPMS/rsync-2.5.5-5.3.C21mdk.src.rpm

10.0 i586

 1b4b64408f1d5db5f4f700de0a4add13  10.0/RPMS/rsync-2.6.0-1.2.100mdk.i586.rpm
094ec110689e485c178adf3310e7e86e  10.0/SRPMS/rsync-2.6.0-1.2.100mdk.src.rpm

9.2 i586

 1fef094e97d7c40a2892167e19605dc3  9.2/RPMS/rsync-2.5.7-0.3.92mdk.i586.rpm
b98e8c0684ab6dd8b9f30b45de076e95  9.2/SRPMS/rsync-2.5.7-0.3.92mdk.src.rpm

9.1 i586

 98098a144b62ed85da5778b63293f614  9.1/RPMS/rsync-2.5.7-0.3.91mdk.i586.rpm
088606d2269e99f9f8dd99c095744ec3  9.1/SRPMS/rsync-2.5.7-0.3.91mdk.src.rpm

MNF8.2 i586

 b2cd2101e8900eb64b8a4fe0cf527c7e  mnf8.2/RPMS/rsync-2.5.4-2.3.M82mdk.i586.rpm
9bf7b6090f06886ca50715127ae06618  mnf8.2/SRPMS/rsync-2.5.4-2.3.M82mdk.src.rpm

9.1 i586

 8f5cc0a974b614bbe63ac01445c54ac3  ppc/9.1/RPMS/rsync-2.5.7-0.3.91mdk.ppc.rpm
088606d2269e99f9f8dd99c095744ec3  ppc/9.1/SRPMS/rsync-2.5.7-0.3.91mdk.src.rpm

References