Date: Thu, 4 Dec 2003 07:01:45 -0800 From: Kris Kennaway <kris@obsecurity.org> To: hubs@FreeBSD.org Subject: [kris@FreeBSD.org: cvs commit: ports/net/rsync Makefile distinfo] Message-ID: <20031204150144.GG79714@xor.obsecurity.org>
next in thread | raw e-mail | index | archive | help
--uc35eWnScqDcQrv5 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Mirror operators, please update your rsyncd immeiately. Also, the rsync developers suggest not using "use chroot=3Dno" for security reasons. I don't know whether this is viable for mirror operation. ----- Forwarded message from Kris Kennaway <kris@FreeBSD.org> ----- X-Original-To: kkenn@localhost Delivered-To: kkenn@localhost.obsecurity.org Delivered-To: kris@freebsd.org Delivered-To: ports-committers@freebsd.org From: Kris Kennaway <kris@FreeBSD.org> Date: Thu, 4 Dec 2003 06:45:06 -0800 (PST) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: ports/net/rsync Makefile distinfo X-FreeBSD-CVS-Branch: HEAD Precedence: bulk X-Loop: FreeBSD.ORG X-UIDL: 84774d27af464bbb0b42f7d4a64327a2 kris 2003/12/04 06:45:06 PST FreeBSD ports repository Modified files: net/rsync Makefile distinfo=20 Log: Security update to rsync 2.5.7. This fixes a remotely-exploitable heap overflow, see http://rsync.samba.org/ for the details. =20 Revision Changes Path 1.87 +1 -2 ports/net/rsync/Makefile http://cvsweb.FreeBSD.org/ports/net/rsync/Makefile.diff?r1=3D1.86&r2=3D1.87 1.34 +1 -1 ports/net/rsync/distinfo http://cvsweb.FreeBSD.org/ports/net/rsync/distinfo.diff?r1=3D1.33&r2=3D1.34 ----- End forwarded message ----- --uc35eWnScqDcQrv5 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (FreeBSD) iD8DBQE/z0xWWry0BWjoQKURAqXEAJ4ut34q2UShR9F+BcrMBaE8GUZIGwCgrDwW tqQ9WmL+TEwH3rE/uukjDHU= =jzOH -----END PGP SIGNATURE----- --uc35eWnScqDcQrv5--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20031204150144.GG79714>