A rsync update is available for Fedora Core 1
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-116
2004-07-01
---------------------------------------------------------------------
Product : Fedora Core 1
Name : rsync
Version : 2.5.7
Release : 5.fc1
Summary : A program for synchronizing files over a network.
Description :
Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable replacement for the rcp command. A technical report which describes the rsync algorithm is included in this package.
---------------------------------------------------------------------
Update Information:
Rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot. This could allow a remote attacker to write files outside of the module's "path", depending on the privileges assigned to the rsync daemon. Users not running an rsync daemon, running a read-only daemon, or running a chrooted daemon are not affected by this issue. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0426 to this issue.
Updated packages were made available in June 2004 however the original update notification email did not make it to fedora-announce-list at that time.
---------------------------------------------------------------------
* Wed May 05 2004 Jay Fenlason fenlason@redhat.com 2.5.7-5.fc1
- Include a patch from Wayne Davison wayned@samba.org
which fixes CAN-2004-0426
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
eea10f37a84d20da60b94ddd3a3c575c SRPMS/rsync-2.5.7-5.fc1.src.rpm
f3ab287f51ad1048bf58cb2a3c85dd3d x86_64/rsync-2.5.7-5.fc1.x86_64.rpm
f823931130df1d1d50276d52d9cc5e0c x86_64/debug/rsync-debuginfo-2.5.7-5.fc1.x86_64.rpm
236adecc9155a4728555650df95beb30 i386/rsync-2.5.7-5.fc1.i386.rpm
d15048dea45f4e0db43e82f0a22940ea i386/debug/rsync-debuginfo-2.5.7-5.fc1.i386.rpm
This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-116
2004-07-01
---------------------------------------------------------------------
Product : Fedora Core 1
Name : rsync
Version : 2.5.7
Release : 5.fc1
Summary : A program for synchronizing files over a network.
Description :
Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable replacement for the rcp command. A technical report which describes the rsync algorithm is included in this package.
---------------------------------------------------------------------
Update Information:
Rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot. This could allow a remote attacker to write files outside of the module's "path", depending on the privileges assigned to the rsync daemon. Users not running an rsync daemon, running a read-only daemon, or running a chrooted daemon are not affected by this issue. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0426 to this issue.
Updated packages were made available in June 2004 however the original update notification email did not make it to fedora-announce-list at that time.
---------------------------------------------------------------------
* Wed May 05 2004 Jay Fenlason fenlason@redhat.com 2.5.7-5.fc1
- Include a patch from Wayne Davison wayned@samba.org
which fixes CAN-2004-0426
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
eea10f37a84d20da60b94ddd3a3c575c SRPMS/rsync-2.5.7-5.fc1.src.rpm
f3ab287f51ad1048bf58cb2a3c85dd3d x86_64/rsync-2.5.7-5.fc1.x86_64.rpm
f823931130df1d1d50276d52d9cc5e0c x86_64/debug/rsync-debuginfo-2.5.7-5.fc1.x86_64.rpm
236adecc9155a4728555650df95beb30 i386/rsync-2.5.7-5.fc1.i386.rpm
d15048dea45f4e0db43e82f0a22940ea i386/debug/rsync-debuginfo-2.5.7-5.fc1.i386.rpm
This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.
