An updated rsync package that fixes one security issue is now available for Red Hat Enterprise Linux 6.
The Red Hat Security Response Team has rated this update as having moderate security impact.
rsync is a program for synchronizing files over a network.
A memory corruption flaw was found in the way the rsync client processed malformed file list data. If an rsync client used the "--recursive" and "--delete" options without the "--owner" option when connecting to a malicious rsync server, the malicious server could cause rsync on the client system to crash or, possibly, execute arbitrary code with the privileges of the user running rsync.
Before applying this update, make sure all previously-released errata relevant to your system have been applied.
Reference: https://rhn.redhat.com/errata/RHSA-2011-0390.html
NEWS ARCHIVE ·
Red Hat alert Moderate: rsync security update
Originally published 04-01-2011. Preserved from our previous website. Product versions, prices, links, and technical guidance may be out of date.