[Buildroot] [PATCH] rsync: security bump to version 3.1.2

Thomas Petazzoni thomas.petazzoni at free-electrons.com
Tue Dec 22 15:36:09 UTC 2015


Dear Gustavo Zacarias,

On Tue, 22 Dec 2015 07:46:11 -0300, Gustavo Zacarias wrote:
> Fixes:
> Make sure that all transferred files use only path names from inside the
> transfer.  This makes it impossible for a malicious sender to try to
> make the receiver use an unsafe destination path for a transferred file,
> such as a just-sent symlink.
> 
> Signed-off-by: Gustavo Zacarias <gustavo at zacarias.com.ar>
> ---
>  package/rsync/rsync.hash | 2 +-
>  package/rsync/rsync.mk   | 2 +-
>  2 files changed, 2 insertions(+), 2 deletions(-)

Applied, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com



More information about the buildroot mailing list