New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Please update to latest rsync to include security fixes #29

Open

raoulbhatia opened this issue Aug 21, 2022 · 2 comments

raoulbhatia commented Aug 21, 2022

i.e.

for 3.1.x: https://download.samba.org/pub/rsync/NEWS#SECURITY_FIXES-3.1.3
for 3.2.x: https://download.samba.org/pub/rsync/NEWS#SECURITY_FIXES-3.2.5

Thanks,
Raoul

Author

raoulbhatia commented Aug 21, 2022 •

edited

Loading

Actually I just saw that rsync-bpc is already based on 3.1.3.
However, I also noticed https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=924509 w.r.t. https://github.com/backuppc/rsync-bpc/blob/master/zlib/ChangeLog

Possibly related: backuppc/backuppc-xs#9

Lastly, a fix for CVE-2022-37434 is still under consideration, so perhaps it would be good to wait for 1.2.12.1 or 1.2.13, see madler/zlib#686

Neustradamus commented Oct 14, 2022

@madler has done the new build, the 1.2.13 has been released with the CVE-2022-37434 fix.

felag mentioned this issue

How to update rsync-bpc to a more recent rsync version ? #40

Closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment