gpp_maybe
Security update for rsync
SUSE-SUSE-MicroOS-5.2-2025-121
This update for rsync fixes the following issues: NOTE: This update was retracted due to a buggy security fix. A followup update will be provided. - CVE-2024-12085: leak of uninitialized stack data on the server leading to possible ASLR bypass. (bsc#1234101) - CVE-2024-12086: leak of a client machine's file contents through the processing of checksum data. (bsc#1234102) - CVE-2024-12087: arbitrary file overwrite possible on clients when symlink syncing is enabled. (bsc#1234103) - CVE-2024-12088: bypass of the --safe-links flag may allow the placement of unsafe symlinks in a client. (bsc#1234104)
-
Release DateJan 15 2025
-
ReferencesBugzilla: 1234101, 1234102, 1234103, 1234104
CVEs: CVE-2024-12086, CVE-2024-12085, CVE-2024-12088, CVE-2024-12087 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Micro for Rancher 5.2 x86_64
-
Packages
SUSE Linux Enterprise Micro 5.2 s390x
-
Packages
SUSE Linux Enterprise Micro for Rancher 5.2 aarch64
-
Packages