Skip to content
OpenAdvisories
Medium ELSA-2022-7793 1 CVE

Moderate: rsync security and enhancement update (Oracle Linux 8)

Published Nov 15, 2022 · Updated Nov 15, 2022

Summary

[3.1.3-19]
- Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field

[3.1.3-18]
- Resolves: #2111175 - remote arbitrary files write inside the directories of connecting peers

[3.1.3-17]
- Related: #2043753 - New option should not be sent to the server every time

[3.1.3-16]
- Resolves: #2043753 - [RFE] Improve defaults for sparse file buffering

[3.1.3-15]
- Resolves: #2071513 - A flaw in zlib-1.2.11 when compressing (not decompressing!) certain inputs

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 rsync 0:3.1.3-19.el8
Oracle Linux · 8 rsync-daemon 0:3.1.3-19.el8

Vulnerabilities 1