shield Security update for rsync

SUSE-SLE-SERVER-12-2016-113

This update for rsync fixes two security issues and two non-security bugs. The following vulnerabilities were fixed: - CVE-2014-8242: Checksum collisions leading to a denial of service (bsc#900914) - CVE-2014-9512: Malicious servers could send files outside of the transferred directory (bsc#915410) The following non-security bugs were fixed: - bsc#922710: Prevent rsyncd from spamming the log when trying to register SLP. - bsc#898513: slp support broke rsync usage.

• Release Date
  Jan 19 2016
• References
  Bugzilla: 922710, 898513, 915410, 900914
  CVEs: CVE-2014-9512, CVE-2014-8242
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12 ppc64le

• Packages
  rsync
  Versatile tool for fast incremental file transfer

  3.1.0-6.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP Applications 12 x86_64

• Packages
  rsync
  Versatile tool for fast incremental file transfer

  3.1.0-6.1 lock rpm lock src

SUSE Linux Enterprise Server 12 s390x

• Packages
  rsync
  Versatile tool for fast incremental file transfer

  3.1.0-6.1 lock rpm lock src