Publishing details

Published on 2023-06-01
Copied from ubuntu jammy in PPA for Ubuntu Security Proposed

Changelog

rsync (3.2.7-0ubuntu0.22.04.2) jammy-security; urgency=medium

  * SECURITY UPDATE: arbitrary file write via malicious remote servers
    - Updated to 3.2.7 to fix security issue and multiple regressions
      caused by the original security fixes.
    - debian/patches: Added two additional upstream patches:
      + trust_the_sender_on_a_local_transfer.patch
      + avoid_quoting_of_tilde_when_its_a_destination_arg.patch
    - Removed patches no longer needed with 3.2.7:
      + CVE-2020-14387.patch, fix_ftcbfs_configure.patch,
        fix_delay_updates.patch, copy-devices.diff,
        workaround_glibc_lchmod_regression.patch,
        manpage_upstream_fixes.patch, fix_mkpath.patch,
        fix_sparse_inplace.patch, update_rrsync_options.patch,
        fix_rsync-ssl_RSYNC_SSL_CERT_feature.patch,
        avoid_spurious_is_newer_messages_with_update.patch.
    - debian/control, debian/rules, debian/rsync.install,
      debian/rsync.links: ship new python-based rrsync.
    - debian/rsync.install: cull_options has been renamed to cull-options.
    - CVE-2022-29154

 -- Marc Deslauriers <email address hidden>  Mon, 27 Feb 2023 14:36:14 -0500

Available diffs

diff from 3.2.3-4ubuntu1 (in Ubuntu) to 3.2.7-0ubuntu0.22.04.2 (500.4 KiB)
diff from 3.2.3-8ubuntu3.1 (in Ubuntu) to 3.2.7-0ubuntu0.22.04.2 (517.5 KiB)
diff from 3.2.7-0ubuntu0.22.04.1 to 3.2.7-0ubuntu0.22.04.2 (462 bytes)

Builds

Package files

rsync_3.2.7-0ubuntu0.22.04.2.debian.tar.xz (26.1 KiB)
rsync_3.2.7-0ubuntu0.22.04.2.dsc (2.3 KiB)
rsync_3.2.7.orig.tar.gz (1.1 MiB)
rsync_3.2.7.orig.tar.gz.asc (195 bytes)