[Bug 1307230] Re: 3.1.0 daemon infinite loop when no matched user in secrets
CVE requested: http://www.openwall.com/lists/oss-security/2014/04/14/5 ** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to rsync in Ubuntu. https://bugs.launchpad.net/bugs/1307230 Title: 3.1.0 daemon infinite loop when no matched user in secrets To manage notifications about this bug go to: https://bugs.launchpad.net/rsync/+bug/1307230/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1307230] Re: 3.1.0 daemon infinite loop when no matched user in secrets
** Changed in: rsync (Ubuntu Trusty) Status: New => Triaged ** Changed in: rsync (Ubuntu Trusty) Importance: Undecided => High -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to rsync in Ubuntu. https://bugs.launchpad.net/bugs/1307230 Title: 3.1.0 daemon infinite loop when no matched user in secrets To manage notifications about this bug go to: https://bugs.launchpad.net/rsync/+bug/1307230/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1307230] Re: 3.1.0 daemon infinite loop when no matched user in secrets
** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2014-2855 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to rsync in Ubuntu. https://bugs.launchpad.net/bugs/1307230 Title: 3.1.0 daemon infinite loop when no matched user in secrets To manage notifications about this bug go to: https://bugs.launchpad.net/rsync/+bug/1307230/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1307230] Re: 3.1.0 daemon infinite loop when no matched user in secrets
This bug was fixed in the package rsync - 3.1.0-2ubuntu0.1 --- rsync (3.1.0-2ubuntu0.1) trusty-security; urgency=medium * SECURITY UPDATE: denial of service via invalid username (LP: #1307230) - debian/patches/CVE-2014-2855.diff: avoid infinite wait reading secrets file in authenticate.c. - CVE-2014-2855 -- Marc DeslauriersThu, 17 Apr 2014 12:56:34 -0400 ** Changed in: rsync (Ubuntu Trusty) Status: Triaged => Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to rsync in Ubuntu. https://bugs.launchpad.net/bugs/1307230 Title: 3.1.0 daemon infinite loop when no matched user in secrets To manage notifications about this bug go to: https://bugs.launchpad.net/rsync/+bug/1307230/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
