New version 3.4.0. Contains fixes for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-2024-12088, CVE-2024-12747
This update has been submitted for testing by mruprich.
This update's test gating status has been changed to 'waiting'.
mruprich edited this update.
Just pushed this to my public Fedora mirrors and so far so good. I don't think exploit code is public so I can't test the security fixes but it does function correctly to serve local files and fetch remote ones.
This update's test gating status has been changed to 'passed'.
This update has been pushed to testing.
This update has been submitted for stable by bodhi.
Works.
Works great! LGTM! =)
https://github.com/RsyncProject/rsync/issues/702
https://github.com/RsyncProject/rsync/issues/701
This update has been unpushed.
Yeah, 3.4.1 just got released with fixes for the above issues.
Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.
This update can be pushed to stable now if the maintainer wishes
This update has been obsoleted by rsync-3.4.1-1.fc41.
Please login to add feedback.
Confirm request to re-trigger tests.
This update has been submitted for testing by mruprich.
This update's test gating status has been changed to 'waiting'.
This update's test gating status has been changed to 'waiting'.
mruprich edited this update.
Just pushed this to my public Fedora mirrors and so far so good. I don't think exploit code is public so I can't test the security fixes but it does function correctly to serve local files and fetch remote ones.
This update's test gating status has been changed to 'passed'.
This update has been pushed to testing.
This update has been submitted for stable by bodhi.
Works.
Works great! LGTM! =)
https://github.com/RsyncProject/rsync/issues/702
https://github.com/RsyncProject/rsync/issues/701
This update has been unpushed.
This update has been submitted for testing by mruprich.
Yeah, 3.4.1 just got released with fixes for the above issues.
This update has been pushed to testing.
Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.
This update can be pushed to stable now if the maintainer wishes
This update has been obsoleted by rsync-3.4.1-1.fc41.