Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 502
Alerts This Week
Warning Icon 1 502

Red Hat: RHSA-2004:436-01 Critical: rsync Path Sanitization Issue

red hat
Calendar Grey September 1, 2004
Dist Redhat Esm H88
Enhanced rsync package from Red Hat resolves a path sanitizing bug critical to safeguarding files in network sync.
An updated rsync package that fixes a path sanitizing bug is now available.

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system:

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/

5. Bug IDs fixed (http://bugzilla.redhat.com/ for more info):

130050 - rsync path sanitizing bug

6. RPMs required:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1:

SRPMS:

38c1f184d5cc84489a573e904c6e7988 rsync-2.5.7-3.21AS.1.src.rpm

i386: ded5b61ac737f3c1c61dc8b9335c207e rsync-2.5.7-3.21AS.1.i386.rpm

ia64: fa113cb18579a3d71d021ef4674deffa rsync-2.5.7-3.21AS.1.ia64.rpm

Red Hat Linux Advanced Workstation 2.1:

SRPMS:

38c1f184d5cc84489a573e904c6e7988 rsync-2.5.7-3.21AS.1.src.rpm

ia64: fa113cb18579a3d71d021ef4674deffa rsync-2.5.7-3.21AS.1.ia64.rpm

Red Hat Enterprise Linux ES version 2.1:

SRPMS:

38c1f184d5cc84489a573e904c6e7988 rsync-2.5.7-3.21AS.1.src.rpm

i386: ded5b61ac737f3c1c61dc8b9335c207e rsync-2.5.7-3.21AS.1.i386.rpm

Red Hat Enterprise Linux WS version 2.1:

SRPMS:

38c1f184d5cc84489a573e904c6e7988 rsync-2.5.7-3.21AS.1.src.rpm

i386: ded5b61ac737f3c1c61dc8b9335c207e rsync-2.5.7-3.21AS.1.i386.rpm

Red Hat Enterprise Linux AS version 3:

SRPMS:

a08f47856c11488dbb199e2960618439 rsync-2.5.7-5.3E.src.rpm

i386: d0966ec43976699f3ae0c275fdcd066f rsync-2.5.7-5.3E.i386.rpm

ia64: 7a4ead9d5e1d755b453a8b5a2964eb75 rsync-2.5.7-5.3E.ia64.rpm

ppc: 8a771ecf22666ed3f3de2af94ff0059b rsync-2.5.7-5.3E.ppc.rpm

ppc64: cacc25c9afc8a5256204725597295be3 rsync-2.5.7-5.3E.ppc64.rpm

s390: c4227c768095dd4f4c62f5b6eb7abe8c rsync-2.5.7-5.3E.s390.rpm

s390x: 16177f1105d0bff168394b84e9ce187a rsync-2.5.7-5.3E.s390x.rpm

x86_64: d0b5238572ed1d2b26102a8f7be694c4 rsync-2.5.7-5.3E.x86_64.rpm

Red Hat Desktop version 3:

SRPMS:

a08f47856c11488dbb199e2960618439 rsync-2.5.7-5.3E.src.rpm

i386: d0966ec43976699f3ae0c275fdcd066f rsync-2.5.7-5.3E.i386.rpm

x86_64: d0b5238572ed1d2b26102a8f7be694c4 rsync-2.5.7-5.3E.x86_64.rpm

Red Hat Enterprise Linux ES version 3:

SRPMS:

a08f47856c11488dbb199e2960618439 rsync-2.5.7-5.3E.src.rpm

i386: d0966ec43976699f3ae0c275fdcd066f rsync-2.5.7-5.3E.i386.rpm

ia64: 7a4ead9d5e1d755b453a8b5a2964eb75 rsync-2.5.7-5.3E.ia64.rpm

x86_64: d0b5238572ed1d2b26102a8f7be694c4 rsync-2.5.7-5.3E.x86_64.rpm

Red Hat Enterprise Linux WS version 3:

SRPMS:

a08f47856c11488dbb199e2960618439 rsync-2.5.7-5.3E.src.rpm

i386: d0966ec43976699f3ae0c275fdcd066f rsync-2.5.7-5.3E.i386.rpm

ia64: 7a4ead9d5e1d755b453a8b5a2964eb75 rsync-2.5.7-5.3E.ia64.rpm

x86_64: d0b5238572ed1d2b26102a8f7be694c4 rsync-2.5.7-5.3E.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from


Summary

Topics%20covered

Topics Covered

security advisory Red Hat critical issue rsync path sanitizing network synchronization

References

/ https://www.cve.org/CVERecord?id=CVE-CAN-2004-0792

Package List


Severity
critical
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2004:436-01
Issue date: 2004-09-01
Updated on: 2004-09-01
Product: Red Hat Enterprise Linux

Topic

An updated rsync package that fixes a path sanitizing bug is now available.

Topics%20covered

Topics Covered

security advisory Red Hat critical issue rsync path sanitizing network synchronization

Relevant Releases Architectures

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64

Red Hat Linux Advanced Workstation 2.1 - ia64

Red Hat Enterprise Linux ES version 2.1 - i386

Red Hat Enterprise Linux WS version 2.1 - i386

Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, ppc64, s390, s390x, x86_64

Red Hat Desktop version 3 - i386, x86_64

Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64

Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.