From: Secunia Security Advisories (sec-advsecunia.com)
Date: Tue Aug 17 2004 - 03:08:07 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
SuSE update for rsync

SECUNIA ADVISORY ID:
SA12307

VERIFY ADVISORY:
http://secunia.com/advisories/12307/

CRITICAL:
Less critical

IMPACT:
Exposure of sensitive information, Exposure of system information

WHERE:
From remote

OPERATING SYSTEM:
SuSE eMail Server 3.x
http://secunia.com/product/1168/
SuSE Linux 8.x
http://secunia.com/product/141/
SuSE Linux 9.0
http://secunia.com/product/2467/
SuSE Linux 9.1
http://secunia.com/product/3473/
SuSE Linux Connectivity Server
http://secunia.com/product/1169/
SuSE Linux Database Server
http://secunia.com/product/1178/
SuSE Linux Enterprise Server 7
http://secunia.com/product/1170/
SuSE Linux Enterprise Server 8
http://secunia.com/product/1171/
SuSE Linux Firewall on CD/Admin host
http://secunia.com/product/1179/
SuSE Linux Office Server
http://secunia.com/product/1172/

DESCRIPTION:
SuSE has issued an update for rsync. This fixes a vulnerability,
which potentially can be exploited by malicious users to read or
write arbitrary files on a vulnerable system.

For more information:
SA12294

SOLUTION:
Apply updated packages.

-- x86 Platform --

SUSE Linux 9.1:
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/rsync-2.6.2-8.9.i586.rpm
afa5b8894e2d1acff4b040e8ba515ae4
patch rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/rsync-2.6.2-8.9.i586.patch.rpm
c0bf6dcf573a9a4197da0977ea638f2a
source rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/src/rsync-2.6.2-8.9.src.rpm
f31f409225560bd1ac1d5fb5f0d8c43e

SUSE Linux 9.0:
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/rsync-2.6.2-26.i586.rpm
5d7be9a510a4a5fafccbc29c63b0dec8
patch rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/rsync-2.6.2-26.i586.patch.rpm
70809462c5d88bc8241b544100689efe
source rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/src/rsync-2.6.2-26.src.rpm
f92d91816456f0e626ea1ee41ebe8b65

SUSE Linux 8.2:
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/rsync-2.6.2-26.i586.rpm
4f901dee110596bf2a48a24d8d094b71
patch rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/rsync-2.6.2-26.i586.patch.rpm
c7260721ec51a569309cd4629a3a5ad1
source rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/src/rsync-2.6.2-26.src.rpm
fcd540a8e89c864b56cbad7d60696450

SUSE Linux 8.1:
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/rsync-2.6.2-25.i586.rpm
193752687ef1d98a5ebec4ff471842b1
patch rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/rsync-2.6.2-25.i586.patch.rpm
9b6225e3bd2ff624f5f61bd6b033e8b8
source rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/src/rsync-2.6.2-25.src.rpm
0f649de8547008aa5e2a977ff209fca3

-- x86-64 Platform --

SUSE Linux 9.1:
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/rsync-2.6.2-8.9.x86_64.rpm
745a09fdbccc7ccfea9705f54a6825a3
patch rpm(s):
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/rsync-2.6.2-8.9.x86_64.patch.rpm
725b10d1703f6ee41185564d08b151d3
source rpm(s):
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/src/rsync-2.6.2-8.9.src.rpm
6145ed8346ebfd63863734b30fc3a8e9

SUSE Linux 9.0:
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/rsync-2.6.2-26.x86_64.rpm
20d3b3f8b3fde71ae1c3f0eed22feee0
patch rpm(s):
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/rsync-2.6.2-26.x86_64.patch.rpm
9bc24b61361c74f37e4fd81e8e7faa98
source rpm(s):
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/src/rsync-2.6.2-26.src.rpm
599e9f0a19fd2890499c863cd0394598

ORIGINAL ADVISORY:
http://www.suse.de/de/security/2004_26_rsync.html

OTHER REFERENCES:
SA12294:
http://secunia.com/advisories/12294/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]