rsync 2.6.1 released (including security note)
Albert Chin
rsync at mlists.thewrittenword.com
Sun May 2 02:25:36 GMT 2004
On Tue, Apr 27, 2004 at 04:04:21PM +0200, Paul Slootman wrote:
> On Mon 26 Apr 2004, Wayne Davison wrote:
> >
> > It includes a security note about a fix that affects read/write daemons
> > that are not using chroot. If that includes you, you should look into
> > upgrading (or maybe enabling chroot on an older rsync).
>
> Is it possible to find the patches responsible for fixing the chroot
> thing? The stable version of Debian doesn't accept new versions to fix
> security risks (because the new version may introduce other as yet
> unknown security risks). Instead, policy is to patch the stable version
> with the fix.
Anyone ever come up with a patch for the chroot fix against 2.5?
--
albert chin (china at thewrittenword.com)
More information about the rsync
mailing list