products/SUSE_ALP_Standard
8
0
Fork 1
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

Adding patchinfo patchinfo.20250123145545485403.154186277494808

Browse Source
This commit is contained in:
Adrian Schröter 2025-02-04 09:54:22 +01:00
parent 27f793b923
commit c1c8bcccac
1 changed files with 30 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
patchinfo.20250123145545485403.154186277494808/_patchinfo Normal file
View File

@ -0,0 +1,30 @@
<patchinfo>
<!-- generated from request(s) 358938 -->
<issue tracker="bnc" id="1234100">VUL-0: CVE-2024-12084: rsync: Heap Buffer Overflow in Checksum Parsing</issue>
<issue tracker="bnc" id="1234101">VUL-0: CVE-2024-12085: rsync: Info Leak via uninitialized Stack contents defeats ASLR</issue>
<issue tracker="bnc" id="1234102">VUL-0: CVE-2024-12086: rsync: server leaks arbitrary client files</issue>
<issue tracker="bnc" id="1234103">VUL-0: CVE-2024-12087: rsync: server can make client write files outside of destination directory using symbolic links</issue>
<issue tracker="bnc" id="1234104">VUL-0: CVE-2024-12088: rsync: --safe-links bypass</issue>
<issue tracker="bnc" id="1235475">VUL-0: CVE-2024-12747: rsync: Race Condition in rsync Handling Symbolic Links</issue>
<issue tracker="cve" id="2024-12084"/>
<issue tracker="cve" id="2024-12085"/>
<issue tracker="cve" id="2024-12086"/>
<issue tracker="cve" id="2024-12087"/>
<issue tracker="cve" id="2024-12088"/>
<issue tracker="cve" id="2024-12747"/>
<packager>ayankov</packager>
<rating>critical</rating>
<category>security</category>
<summary>Security update for rsync</summary>
<description>This update for rsync fixes the following issues:
- CVE-2024-12084: Fixed Heap Buffer Overflow in Checksum Parsing (bsc#1234100).
- CVE-2024-12085: Fixed Info Leak via uninitialized Stack contents defeating ASLR (bsc#1234101).
- CVE-2024-12086: Fixed server leaking arbitrary client files (bsc#1234102).
- CVE-2024-12087: Fixed server use of symbolic links to make client write files outside of destination directory (bsc#1234103).
- CVE-2024-12088: Fixed --safe-links bypass (bsc#1234104).
- CVE-2024-12747: Fixed Race Condition in rsync Handling Symbolic Links (bsc#1235475).
</description>
<package>rsync</package>
<seperate_build_arch/>
</patchinfo>