Scientific Linux alert SL-rsyn-20110721 (rsync)

From:
    	     
 
Troy Dawson <dawson@fnal.gov> 
To:
    	     
 
"scientific-linux-errata@fnal.gov" <scientific-linux-errata@fnal.gov> 
Subject:
    	     
 
Security ERRATA Moderate: rsync on SL5.x i386/x86_64 
Date:
    	     
 
Thu, 04 Aug 2011 13:49:30 -0500
Message-ID:
    	     
 
<4E3AE9BA.4070204@fnal.gov>
Archive-link:
    	     
 
Article, Thread
              
Synopsis:    Moderate: rsync security and bug fix
Issue Date:  2011-07-21, 2011-08-02

This updated rsync package fixes the following bug:

* The previous rsync security errata update, which was applied with the 
rsync tool update to version 3.0.6-4, introduced a patch which fixed the 
issue with missing memory deallocation. Due to an error in that patch, 
the following new issue appeared: when specifying the source or
destination argument of the rsync command without the optional user@ 
argument, rsync failed to provide the correct parameters to an external 
command, such as ssh, and thus rsync failed with an error. With this 
update, the source code has been modified to fix this issue

Because of the bug, the Scientific Linux Development Team was not able 
to release the 3.0.6-4 security update.

All users of rsync are advised to upgrade to this updated package, which
resolves this bug, and provides the security, bug fixes and enhancements 
of the 3.0.6-4 errata update.

SL5:
    i386
       rsync-3.0.6-4.el5_7.1.i386.rpm
    x86_64
       rsync-3.0.6-4.el5_7.1.x86_64.rpm

- Scientific Linux Development Team