[CLSA-2022:1662658118] Fix CVE(s): CVE-2022-29154

Type:

security

Severity:

Important

Release date:

2022-09-08 17:28:38 UTC

Description:

   * SECURITY UPDATE: arbitrary file write vulnerability via malicious
     rsync server (MITM attack), refactoring
     - debian/patches/CVE-2022-29154-0.patch: prepare for CVE-2022-29154
       patch
     - debian/patches/CVE-2022-29154-1.patch: add extra file-list safety
       checks
     - CVE-2022-29154

Updated packages:

rsync_3.1.1-3ubuntu1.3+tuxcare.els4_amd64.deb
sha:34107c96cb87c3f80596c0d6aa4abffca13a1e58

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.