Stay Secure with the Latest Linux Advisories

security advisoryRed Hat Enterprise Linuxsecurity impact

RedHat: RHSA-2022-6173-01 Important: rsync Remote File Write Risk

An update for rsync is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: rsync security update Advisory ID: RHSA-2022:6173-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:6173 Issue date: 2022-08-24 CVE Names: CVE-2022-29154 ==================================================================== 1. Summary: An update for rsync is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux BaseOS E4S (v. 8.1) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: remote arbitrary files write inside the directories of connecting peers (CVE-2022-29154) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugsfixed (https://bugzilla.redhat.com/): 2110928 - CVE-2022-29154 rsync: remote arbitrary files write inside the directories of connecting peers 6. Package List: Red Hat Enterprise Linux BaseOS E4S (v. 8.1): Source: rsync-3.1.3-6.el8_1.2.src.rpm aarch64: rsync-3.1.3-6.el8_1.2.aarch64.rpm rsync-debuginfo-3.1.3-6.el8_1.2.aarch64.rpm rsync-debugsource-3.1.3-6.el8_1.2.aarch64.rpm noarch: rsync-daemon-3.1.3-6.el8_1.2.noarch.rpm ppc64le: rsync-3.1.3-6.el8_1.2.ppc64le.rpm rsync-debuginfo-3.1.3-6.el8_1.2.ppc64le.rpm rsync-debugsource-3.1.3-6.el8_1.2.ppc64le.rpm s390x: rsync-3.1.3-6.el8_1.2.s390x.rpm rsync-debuginfo-3.1.3-6.el8_1.2.s390x.rpm rsync-debugsource-3.1.3-6.el8_1.2.s390x.rpm x86_64: rsync-3.1.3-6.el8_1.2.x86_64.rpm rsync-debuginfo-3.1.3-6.el8_1.2.x86_64.rpm rsync-debugsource-3.1.3-6.el8_1.2.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2022-29154 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYwa9gNzjgjWX9erEAQgAuQ/+JlQXC9cH1hi3JgihfbkorJNPo5orcLQn F5gLhlLytavX1+PnI53f1dkyucXPbr+4EOrvsQJYOSVs3spU3I4M0sFz31+WcFYX pwgv7WFqeWvaujDsAIkxT2a60l3vgFdy1bA295aULM5T/nxcrcaiNwpk4CgUq3mt nkost/Ruxmfrxwjy8CD8OH9N2/PeE2HzpT8CElc/TYUTgYu1sr0BEvaKNMogzjRS d7y10T6DyR2Ikf4WfhiwDFc4cUigm/QMdorfQqPBMMhuputXrx6crpxKtFo4DaYT 7aiU7iKVV8uH+4utYjelICAybmBFuw2RQA9dkBRrIcGMui/jP0YgW5FZrR+djLuS rr0T1U5vyOEHkSYLEA9IrrpKWRagbzyi7POW8B0ckEZ9zdywFcDHhpiO8v9rUxf/ V0mMtS62UzJuy/C38amv2Gte6iwtY83vf13JF1oyAjCXqa77t/X0Pig4k56bFLS2 RMw/hBCfdQRAgIpfcueOS7xKUXy6xiflOYrlM+IJ+TntU4PckOjStjM0eBlvldXl O6aL/DXlHLxbyFUDJxF6uK6IyfQyaJ0e7cqIfcjh71ZzW07pGqVkbaHPD4DREXIr SXbnesRnC7ARWEJpTtSIO//OsS6Zn5jcPoUTbHgrQhmQG7813EOCMQGHztfVBvtS n5PB7isC9vk=EEq5 -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Critical rsync security patch released for Red Hat Enterprise Linux. Comprehensive advisory containing necessary updates and technical specifics.. Rsync Security Update, Red Hat Advisory, Enterprise Linux Security. . Severity: Important. LinuxSecurity.com Team

Aug 24, 2022 •Important Red Hat