Scientific Linux: Moderate Advisory SL5.x Rsync Security Patch

Date: Thu, 4 Aug 2011 13:49:30 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Security ERRATA Moderate: rsync on SL5.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 
MIME-Version: 1.0

Synopsis: Moderate: rsync security and bug fix
Issue Date: 2011-07-21, 2011-08-02

This updated rsync package fixes the following bug:

* The previous rsync security errata update, which was applied with the
rsync tool update to version 3.0.6-4, introduced a patch which fixed the
issue with missing memory deallocation. Due to an error in that patch,
the following new issue appeared: when specifying the source or
destination argument of the rsync command without the optional user@
argument, rsync failed to provide the correct parameters to an external
command, such as ssh, and thus rsync failed with an error. With this
update, the source code has been modified to fix this issue

Because of the bug, the Scientific Linux Development Team was not able
to release the 3.0.6-4 security update.

All users of rsync are advised to upgrade to this updated package, which
resolves this bug, and provides the security, bug fixes and enhancements
of the 3.0.6-4 errata update.

SL5:
 i386
 rsync-3.0.6-4.el5_7.1.i386.rpm
 x86_64
 rsync-3.0.6-4.el5_7.1.x86_64.rpm

- Scientific Linux Development Team