rsync 3.1.2-2ubuntu0.2 source package in Ubuntu


rsync (3.1.2-2ubuntu0.2) artful-security; urgency=medium

  * SECURITY UPDATE: receive_xattr function does not check
    for '\0' character allowing denial of service attacks
    - debian/patches/CVE-2017-16548.patch: enforce trailing
      \0 when receiving xattr values in xattrs.c.
    - CVE-2017-16548
  * SECURITY UPDATE: Allows remote attacker to bypass argument
    - debian/patches/CVE-2018-5764.patch: Ignore --protect-args
      when already sent by client in options.c.
    - CVE-2018-5764

 -- <email address hidden> (Leonidas S. Barbosa)  Thu, 18 Jan 2018 17:34:53 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa on 2018-01-18
Uploaded to:
Original maintainer:
Ubuntu Developers
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Artful updates on 2018-01-23 main net
Artful security on 2018-01-23 main net


File Size SHA-256 Checksum
rsync_3.1.2.orig.tar.gz 871.8 KiB ecfa62a7fa3c4c18b9eccd8c16eaddee4bd308a76ea50b5c02a5840f09c0a1c2
rsync_3.1.2-2ubuntu0.2.debian.tar.xz 34.9 KiB 63dee8eb489e5e7cf872d6ea9ce5998449a3bcd2139b6745ed713889d45a1cb6
rsync_3.1.2-2ubuntu0.2.dsc 1.7 KiB 0ac069fb27b399c60a3baa9bece8a2e1702dc79f67b49416fb687b8a6a8e9192

View changes file

Binary packages built by this source

rsync: fast, versatile, remote (and local) file-copying tool

 rsync is a fast and versatile file-copying tool which can copy locally
 and to/from a remote host. It offers many options to control its behavior,
 and its remote-update protocol can minimize network traffic to make
 transferring updates between machines fast and efficient.
 It is widely used for backups and mirroring and as an improved copy
 command for everyday use.
 This package provides both the rsync command line tool and optional
 daemon functionality.