ELSA-2022-8291

ELSA-2022-8291 - rsync security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2022-11-22

Description

[3.2.3-18]
- Resolves: #2111177 - remote arbitrary files write inside the directories of connecting peers

[3.2.3-17]
- Resolves: #2116669 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field

[3.2.3-16]
- Related: #2081296 - Adding ci.fmf for separation of testing results

[3.2.3-15]
- Related: #2081296 - Disabling STI

[3.2.3-14]
- Resolves: #2071514 - A flaw found in zlib when compressing (not decompressing) certain inputs

[3.2.3-13]
- Resolves: #2079639 - rsync --atimes doesnt work

[3.2.3-12]
- Resolves: #2081296 - Enable fmf tests in centos stream

[3.2.3-11]
- Resolves: #2053198 - rsync segmentation fault

[3.2.3-10]
- Resolves: #2077431 - Read-only files that have changed xattrs fail to allow xattr changes

Related CVEs

CVE-2022-37434

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	rsync-3.2.3-18.el9.src.rpm	3ca70d04c19c47ccfd013fbf1a79d76caa44ac2f09e80cd34ec64aa18e925213	-	ol9_aarch64_appstream
	rsync-3.2.3-18.el9.src.rpm	3ca70d04c19c47ccfd013fbf1a79d76caa44ac2f09e80cd34ec64aa18e925213	-	ol9_aarch64_baseos_latest
	rsync-3.2.3-18.el9.src.rpm	3ca70d04c19c47ccfd013fbf1a79d76caa44ac2f09e80cd34ec64aa18e925213	-	ol9_aarch64_u1_baseos_base
	rsync-3.2.3-18.el9.aarch64.rpm	5243d5f1e9e6bdaa125358c36b0e3ee060eae2413f4f69299a0a73d58de26b9f	-	ol9_aarch64_baseos_latest
	rsync-3.2.3-18.el9.aarch64.rpm	5243d5f1e9e6bdaa125358c36b0e3ee060eae2413f4f69299a0a73d58de26b9f	-	ol9_aarch64_u1_baseos_base
	rsync-daemon-3.2.3-18.el9.noarch.rpm	abad0a35cc7f73202ce110339b2a8561d18291f9f5f188cbecdedff6b7e2468c	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	rsync-3.2.3-18.el9.src.rpm	3ca70d04c19c47ccfd013fbf1a79d76caa44ac2f09e80cd34ec64aa18e925213	-	ol9_x86_64_appstream
	rsync-3.2.3-18.el9.src.rpm	3ca70d04c19c47ccfd013fbf1a79d76caa44ac2f09e80cd34ec64aa18e925213	-	ol9_x86_64_baseos_latest
	rsync-3.2.3-18.el9.src.rpm	3ca70d04c19c47ccfd013fbf1a79d76caa44ac2f09e80cd34ec64aa18e925213	-	ol9_x86_64_u1_baseos_base
	rsync-3.2.3-18.el9.x86_64.rpm	8bdd56ee8abdef2adac795ce9fbcb3ba5c713a9ec85581063c562a4731fa57a0	-	ol9_x86_64_baseos_latest
	rsync-3.2.3-18.el9.x86_64.rpm	8bdd56ee8abdef2adac795ce9fbcb3ba5c713a9ec85581063c562a4731fa57a0	-	ol9_x86_64_u1_baseos_base
	rsync-daemon-3.2.3-18.el9.noarch.rpm	abad0a35cc7f73202ce110339b2a8561d18291f9f5f188cbecdedff6b7e2468c	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team