Re: [WSO Core #5325] [SECURITY] [DSA 538-1] New rsync packages fix unauthorised directory traversal and file access

[Jan Wagner]

Hi there!

Does anybody know, if rsync 2.6.2-3 will reach sarge before it is released? If 
not, the Security hole will be open until the Security Team will be release a 
fixed package.

Kind regards, Jan.
-- 
 ,,_
If wishes were wings,  o   )~  would fly.

-BEGIN GEEK CODE BLOCK-
Version: 3.12
GIT d-- s+: a-- C+++ UL P+ L+++ E- W+++ N+++ o++ K++ w---
O M-- V- PS PE Y++ PGP++ t-- 5 X R tv- b+ DI- D++
G++ e++ h-- r+++ y+++
--END GEEK CODE BLOCK--


pgpoNHfycW0i2.pgp
Description: PGP signature

Re: [WSO Core #5325] [SECURITY] [DSA 538-1] New rsync packages fix unauthorised directory traversal and file access

[J.H.M. Dassen (Ray)]

reopen 265662
tags 265662 + sarge
thanks

On Thu, Aug 19, 2004 at 10:23:56 +0200, Jan Wagner wrote:
 Does anybody know, if rsync 2.6.2-3 will reach sarge before it is
 released?

The current status: http://bjorn.haxx.se/debian/testing.pl?package=rsync :
trying to update rsync from 2.6.2-2 to 2.6.2-3 (candidate is 4 days old)
rsync is not yet built on arm: 2.6.2-2 vs 2.6.2-3
and rsync is in the needs build queue for ARM indeed (see
http://www.buildd.net/buildd/arm_needs-build.txt). ARM is currently the port
that has the most problems keeping up (see
http://buildd.debian.org/stats/graph2-week-big.png), so it may take some
time yet before a fixed rsync is available for ARM, after which the fixed
package can percolate into sarge.

 If not, the Security hole will be open until the Security Team will be
 release a fixed package.

Adjusting the relevant report's status accordingly,
Ray
-- 
When you are finished spreading joy on Christmas Eve, come and kick back
with me and Erwin for a while. [...] We'll provide the cocoa and cookies,
and we'll even teach you how to play Quake.
From the Dust Puppy's letter to Santa Claus.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

[WSO Core #5325] [SECURITY] [DSA 538-1] New rsync packages fix unauthorised directory traversal and file access

[via RT]

This transaction appears to have no content


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]