Skip to content
OpenAdvisories
Medium ELSA-2022-8291 1 CVE

Moderate: rsync security and bug fix update (Oracle Linux 9)

Published Nov 22, 2022 · Updated Nov 22, 2022

Summary

[3.2.3-18]
- Resolves: #2111177 - remote arbitrary files write inside the directories of connecting peers

[3.2.3-17]
- Resolves: #2116669 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field

[3.2.3-16]
- Related: #2081296 - Adding ci.fmf for separation of testing results

[3.2.3-15]
- Related: #2081296 - Disabling STI

[3.2.3-14]
- Resolves: #2071514 - A flaw found in zlib when compressing (not decompressing) certain inputs

[3.2.3-13]
- Resolves: #2079639 - rsync --atimes doesnt work

[3.2.3-12]
- Resolves: #2081296 - Enable fmf tests in centos stream

[3.2.3-11]
- Resolves: #2053198 - rsync segmentation fault

[3.2.3-10]
- Resolves: #2077431 - Read-only files that have changed xattrs fail to allow xattr changes

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 rsync 0:3.2.3-18.el9
Oracle Linux · 9 rsync-daemon 0:3.2.3-18.el9

Vulnerabilities 1