Fedora Security Update Notification
FEDORA-2003-030
2003-12-04
---------------------------------------------------------------------
Name : rsync
Version : 2.5.7
Release : 2
Summary : A program for synchronizing files over a network.
Description :
Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable replacement for the rcp command. A technical
report which describes the rsync algorithm is included in this package.
---------------------------------------------------------------------
Update Information:
A heap overflow bug exists in rsync versions prior to 2.5.7. On machines where the rsync server has been enabled, a remote attacker could use this flaw to execute arbitrary code as an unprivileged user. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2003-0962 to this issue.
---------------------------------------------------------------------
* Wed Dec 03 2003 Bill Nottingham 2.5.7-2
- rebuild
* Wed Dec 03 2003 Bill Nottingham 2.5.7-1
- update to 2.5.7
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
4e76615d1b2192be4c43d040b85ce67e SRPMS/rsync-2.5.7-2.src.rpm
1072294ffa8bbb37d760600093077348 i386/rsync-2.5.7-2.i386.rpm
fa5d5ca86e6af5c15153800274443f90 i386/debug/rsync-debuginfo-2.5.7-2.i386.rpm
This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.
FEDORA-2003-030
2003-12-04
---------------------------------------------------------------------
Name : rsync
Version : 2.5.7
Release : 2
Summary : A program for synchronizing files over a network.
Description :
Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable replacement for the rcp command. A technical
report which describes the rsync algorithm is included in this package.
---------------------------------------------------------------------
Update Information:
A heap overflow bug exists in rsync versions prior to 2.5.7. On machines where the rsync server has been enabled, a remote attacker could use this flaw to execute arbitrary code as an unprivileged user. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2003-0962 to this issue.
---------------------------------------------------------------------
* Wed Dec 03 2003 Bill Nottingham 2.5.7-2
- rebuild
* Wed Dec 03 2003 Bill Nottingham 2.5.7-1
- update to 2.5.7
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
4e76615d1b2192be4c43d040b85ce67e SRPMS/rsync-2.5.7-2.src.rpm
1072294ffa8bbb37d760600093077348 i386/rsync-2.5.7-2.i386.rpm
fa5d5ca86e6af5c15153800274443f90 i386/debug/rsync-debuginfo-2.5.7-2.i386.rpm
This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.
