Stay Secure with the Latest Linux Advisories

security advisorysecurity issueFedora

Fedora 39: 2023-3909a0ab0e severe: rdiff-backup file deletion

Rebuild for pyinstall CVE-2023-49797 BZ2253844. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-3909a0ab0e 2023-12-19 01:11:13.012576 -------------------------------------------------------------------------------- Name : rdiff-backup Product : Fedora 39 Version : 2.2.6 Release : 3.fc39 URL : https://rdiff-backup.net/ Summary : Convenient and transparent local/remote incremental mirror/backup Description : rdiff-backup is a script, written in Python, that backs up one directory to another and is intended to be run periodically (nightly from cron for instance). The target directory ends up a copy of the source directory, but extra reverse diffs are stored in the target directory, so you can still recover files lost some time ago. The idea is to combine the best features of a mirror and an incremental backup. rdiff-backup can also operate in a bandwidth efficient manner over a pipe, like rsync. Thus you can use rdiff-backup and ssh to securely back a hard drive up to a remote location, and only the differences from the previous backup will be transmitted. -------------------------------------------------------------------------------- Update Information: Rebuild for pyinstall CVE-2023-49797 BZ2253844 -------------------------------------------------------------------------------- ChangeLog: * Sun Dec 10 2023 Frank Crawford - 2.2.6-3 - Rebuild for pyinstall CVE-2023-49797 BZ2253844 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2253843 - CVE-2023-49797 pyinstaller: unauthorized deletion of files https://bugzilla.redhat.com/show_bug.cgi?id=2253843 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-3909a0ab0e' at the command line. For more information, refer to thednf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . The recent patch for CVE-2023-49797 enhances the security framework of rdiff-backup in Fedora 39. Be sure to review the latest update details.. rdiff-backup security, Fedora 39 update, pyinstaller threat. . Severity: Critical. LinuxSecurity.com Team

Dec 19, 2023 •Critical Fedora