SUSE-RU-2023:3370-1

Details

This update for rsync fixes the following issues:

Update to version 3.2.3 (jsc#SLE-21252, jsc#PED-3146)
Add support for using --atimes to preserve atime of files in destination sync (jsc#PED-3145)
Remove SuSEfirewall2 service as this was replaced by firewalld (which already provides a rsyncd service).
Fix --delay-updates never updates after interruption (bsc#1204538)
Arbitrary file write vulnerability via do_server_recv function (bsc#1201840, CVE-2022-29154)
rsync-ssl: Verify the hostname in the certificate when using openssl. (bsc#1176160, CVE-2020-14387)

Affected Packages

SUSE:Enterprise Storage 7.1rsync

Fixed in:

3.2.3-150000.4.23.2

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSrsync

Fixed in:

3.2.3-150000.4.23.2

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSrsync

Fixed in:

3.2.3-150000.4.23.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSrsync

Fixed in:

3.2.3-150000.4.23.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSrsync

Fixed in:

3.2.3-150000.4.23.2

SUSE:Linux Enterprise Micro 5.1rsync

Fixed in:

3.2.3-150000.4.23.2

SUSE:Linux Enterprise Micro 5.2rsync

Fixed in:

3.2.3-150000.4.23.2

SUSE:Linux Enterprise Real Time 15 SP3rsync

Fixed in:

3.2.3-150000.4.23.2

SUSE:Linux Enterprise Server 15 SP1-LTSSrsync

Fixed in:

3.2.3-150000.4.23.2

SUSE:Linux Enterprise Server 15 SP2-LTSSrsync

Fixed in:

3.2.3-150000.4.23.2

SUSE:Linux Enterprise Server 15 SP3-LTSSrsync

Fixed in:

3.2.3-150000.4.23.2

SUSE:Linux Enterprise Server for SAP Applications 15 SP1rsync

Fixed in:

3.2.3-150000.4.23.2

SUSE:Linux Enterprise Server for SAP Applications 15 SP2rsync

Fixed in:

3.2.3-150000.4.23.2

SUSE:Linux Enterprise Server for SAP Applications 15 SP3rsync

Fixed in:

3.2.3-150000.4.23.2

SUSE:Manager Proxy 4.2rsync

Fixed in:

3.2.3-150000.4.23.2

SUSE:Manager Server 4.2rsync

Fixed in:

3.2.3-150000.4.23.2

References

REPORThttps://bugzilla.suse.com/1176160 REPORThttps://bugzilla.suse.com/1201840 REPORThttps://bugzilla.suse.com/1204538 WEBhttps://www.suse.com/security/cve/CVE-2020-14387 WEBhttps://www.suse.com/security/cve/CVE-2022-29154 ADVISORYhttps://www.suse.com/support/update/announcement/-2023-3370/suse-ru-20233370-1/

SUSE-RU-2023:3370-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline