ELSA-2022-7793

ELSA-2022-7793 - rsync security and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2022-11-15

Description

[3.1.3-19]
- Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field

[3.1.3-18]
- Resolves: #2111175 - remote arbitrary files write inside the directories of connecting peers

[3.1.3-17]
- Related: #2043753 - New option should not be sent to the server every time

[3.1.3-16]
- Resolves: #2043753 - [RFE] Improve defaults for sparse file buffering

[3.1.3-15]
- Resolves: #2071513 - A flaw in zlib-1.2.11 when compressing (not decompressing!) certain inputs

Related CVEs

CVE-2022-37434

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	rsync-3.1.3-19.el8.src.rpm	a715d1b5e61f3327a45782e69cfcad522e92c28c1aa391f797c1261a655493e5	-	ol8_aarch64_baseos_latest
	rsync-3.1.3-19.el8.src.rpm	a715d1b5e61f3327a45782e69cfcad522e92c28c1aa391f797c1261a655493e5	-	ol8_aarch64_u7_baseos_base
	rsync-3.1.3-19.el8.aarch64.rpm	72bc3f3926b588071c0686caef2bb075f98ac58cd332a82b0b8eee4e38547319	-	ol8_aarch64_baseos_latest
	rsync-3.1.3-19.el8.aarch64.rpm	72bc3f3926b588071c0686caef2bb075f98ac58cd332a82b0b8eee4e38547319	-	ol8_aarch64_u7_baseos_base
	rsync-daemon-3.1.3-19.el8.noarch.rpm	a6749d108131ca5259b87a1dbc921879c0e2c490d068431994546e9c8df99786	-	ol8_aarch64_baseos_latest
	rsync-daemon-3.1.3-19.el8.noarch.rpm	a6749d108131ca5259b87a1dbc921879c0e2c490d068431994546e9c8df99786	-	ol8_aarch64_u7_baseos_base
Oracle Linux 8 (x86_64)	rsync-3.1.3-19.el8.src.rpm	a715d1b5e61f3327a45782e69cfcad522e92c28c1aa391f797c1261a655493e5	-	ol8_x86_64_baseos_latest
	rsync-3.1.3-19.el8.src.rpm	a715d1b5e61f3327a45782e69cfcad522e92c28c1aa391f797c1261a655493e5	-	ol8_x86_64_u7_baseos_base
	rsync-3.1.3-19.el8.x86_64.rpm	a6d9c1174b27fecaf103281b7fb79107136f056a66400729d1e906cb6c8fc774	-	ol8_x86_64_baseos_latest
	rsync-3.1.3-19.el8.x86_64.rpm	a6d9c1174b27fecaf103281b7fb79107136f056a66400729d1e906cb6c8fc774	-	ol8_x86_64_u7_baseos_base
	rsync-daemon-3.1.3-19.el8.noarch.rpm	a6749d108131ca5259b87a1dbc921879c0e2c490d068431994546e9c8df99786	-	ol8_x86_64_baseos_latest
	rsync-daemon-3.1.3-19.el8.noarch.rpm	a6749d108131ca5259b87a1dbc921879c0e2c490d068431994546e9c8df99786	-	ol8_x86_64_u7_baseos_base

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team