Debian 2.2: DSA-106-1 Critical: Rsync Remote Code Execution

Package : rsync
Problem type : remote exploit
Debian-specific: no

Sebastian Krahmer found several places in rsync (a popular tool to
synchronise files between machines) where signed and unsigned numberswere mixed which resulted in insecure code. This could be abused by
remote users to write 0-bytes in rsync's memory and trick rsync into
executing arbitrary code.

This has been fixed in version 2.3.2-1.3 and we recommend you upgrade
your rsync package immediately.

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.


Debian GNU/Linux 2.2 alias potato
---------------------------------

Potato was released for alpha, arm, i386, m68k, powerpc and sparc.

Source archives:

MD5 checksum: 15ab7ab7ce8ded8c5e55f7aeb62b1d26

MD5 checksum: 4effa9e9249f7c000c0873c08c8ff287

MD5 checksum: 7dbb513c0f37bbbab621a8625c10986b

Alpha architecture:

MD5 checksum: 65f1d1feeb6781dc016483b23c1d7ce5

ARM architecture:

...