rsync-3.2.3-18.el9
エラータID: AXSA:2023-4603:01
The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.
Security Fix(es):
* zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field (CVE-2022-37434)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the MIRACLE LINUX 9.1 Release Notes linked from the References section.
CVE-2022-37434
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).
Update packages.
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).
N/A
SRPMS
- rsync-3.2.3-18.el9.src.rpm
MD5: 2dcd3de398ef47c953c4192fc7f315e7
SHA-256: 7ed3abda7a770e84220cca0cdba664e515684e596ac9a2b3887c2482c6743886
Size: 1.21 MB
Asianux Server 9 for x86_64
- rsync-3.2.3-18.el9.x86_64.rpm
MD5: 66d3f14fa0c3b71735be4591b0e1107b
SHA-256: b7588847a89f78116e333b99d4e8e7fa351d538c57452a8fcfcf2bc8d018059d
Size: 392.62 kB - rsync-daemon-3.2.3-18.el9.noarch.rpm
MD5: fa1a8bde6c19364c592267f88ea07577
SHA-256: 1983c516035be663342f454c20e6f0ea5f07bf4ed5d58a5632c20d557a9c3a36
Size: 10.59 kB