Fedora Test Security Update Notification
FEDORA-2003-030
2003-12-04
---------------------------------------------------------------------
Name : rsync
Version : 2.5.7
Release : 2
Summary : A program for synchronizing files over a network.
Description :
Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable replacement for the rcp command. A technical report which describes the rsync algorithm is included in this package.
---------------------------------------------------------------------
Update Information:
New rsync packages are available that fix a heap overflow in the rsync server; this vulnerability could be used to execute arbitrary code as an unprivileged user. It is recommended that all users using the server functionality of rsync upgrade to the fixed packages.
---------------------------------------------------------------------
* Wed Dec 03 2003 Bill Nottingham 2.5.7-2
- rebuild
* Wed Dec 03 2003 Bill Nottingham 2.5.7-1
- update to 2.5.7
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/1/
f0197db154b24365536b43d1925c8202 SRPMS/rsync-2.5.7-2.src.rpm
3b36cf7353f5fe5435434b41014ae82a i386/rsync-2.5.7-2.i386.rpm
2caa1a6631e87cd03e12d4c9f3b93c0d i386/debug/rsync-debuginfo-2.5.7-2.i386.rpm
This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.
FEDORA-2003-030
2003-12-04
---------------------------------------------------------------------
Name : rsync
Version : 2.5.7
Release : 2
Summary : A program for synchronizing files over a network.
Description :
Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable replacement for the rcp command. A technical report which describes the rsync algorithm is included in this package.
---------------------------------------------------------------------
Update Information:
New rsync packages are available that fix a heap overflow in the rsync server; this vulnerability could be used to execute arbitrary code as an unprivileged user. It is recommended that all users using the server functionality of rsync upgrade to the fixed packages.
---------------------------------------------------------------------
* Wed Dec 03 2003 Bill Nottingham 2.5.7-2
- rebuild
* Wed Dec 03 2003 Bill Nottingham 2.5.7-1
- update to 2.5.7
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/1/
f0197db154b24365536b43d1925c8202 SRPMS/rsync-2.5.7-2.src.rpm
3b36cf7353f5fe5435434b41014ae82a i386/rsync-2.5.7-2.i386.rpm
2caa1a6631e87cd03e12d4c9f3b93c0d i386/debug/rsync-debuginfo-2.5.7-2.i386.rpm
This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.
