[ubuntu/trusty-security] rsync 3.1.0-2ubuntu0.3 (Accepted)

Leonidas S. Barbosa leo.barbosa at canonical.com
Thu Dec 7 13:08:48 UTC 2017


rsync (3.1.0-2ubuntu0.3) trusty-security; urgency=medium

  * SECURITY UPDATE: bypass intended access restrictions
    - debian/patches/CVE-2017-17433.patch: check fname in
      recv_files sooner in receiver.c.
    - CVE-2017-17433
  * SECURITY UPDATE: not check for fnamecmp filenames and
    does not apply sanitize_paths
    - debian/patches/CVE-2017-17434-part1.patch: check daemon
      filter against fnamecmp in receiver.c.
    - debian/patches/CVE-2017-17434-part2.patch: sanitize xname
      in rsync.c.
    - CVE-2017-17434

Date: 2017-12-06 15:04:12.989665+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
https://launchpad.net/ubuntu/+source/rsync/3.1.0-2ubuntu0.3
-------------- next part --------------
Sorry, changesfile not available.


More information about the Trusty-changes mailing list