Information on source package rsync

Available versions

ReleaseVersion
squeeze3.0.7-2
wheezy, sid3.0.9-1

Open issues

Open unimportant issues

BugDescription
CVE-2011-1097rsync 3.x before 3.0.8, when certain recursion, deletion, and ...

Resolved issues

BugDescription
CVE-2003-0962Heap-based buffer overflow in rsync before 2.5.7, when running in ...
CVE-2004-0426rsync before 2.6.1 does not properly sanitize paths when running a ...
CVE-2004-0792Directory traversal vulnerability in the sanitize_path function in ...
CVE-2004-2093Buffer overflow in the open_socket_out function in socket.c for rsync ...
CVE-2005-2096zlib 1.2 and later versions allows remote attackers to cause a denial ...
CVE-2006-2083Integer overflow in the receive_xattr function in the extended ...
CVE-2007-4091Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow ...
CVE-2007-6199rsync before 3.0.0pre6, when running a writable rsync daemon that is ...
CVE-2007-6200Unspecified vulnerability in rsync before 3.0.0pre6, when running a ...
CVE-2008-1720Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute ...

Security announcements

DSADescription
DSA-1545-1rsync
DSA-1360-1rsync - arbitrary code execution
DSA-538rsync - unauthorised directory traversal and file access
DSA-499rsync - directory traversal
DSA-404rsync - heap overflow

Search for package or bug name: Reporting problems

Home - Testing Security Team - Debian Security - Source (SVN)