RHSA-2022:6171: Important: rsync security update
The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.Security Fix(es): rsync: remote arbitrary files write inside the directories of connecting peers (CVE-2022-29154) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/rsyncto a version that resolves this vulnerability.Fixed in 3.1.3-12.el8_4.2 - Upgrade
Upgrade
redhat/rsync-daemonto a version that resolves this vulnerability.Fixed in 3.1.3-12.el8_4.2 - Upgrade
Upgrade
redhat/rsync-debuginfoto a version that resolves this vulnerability.Fixed in 3.1.3-12.el8_4.2 - Upgrade
Upgrade
redhat/rsync-debugsourceto a version that resolves this vulnerability.Fixed in 3.1.3-12.el8_4.2 - Upgrade
Upgrade
redhat/rsyncto a version that resolves this vulnerability.Fixed in 3.1.3-12.el8_4.2.aa - Upgrade
Upgrade
redhat/rsync-debuginfoto a version that resolves this vulnerability.Fixed in 3.1.3-12.el8_4.2.aa - Upgrade
Upgrade
redhat/rsync-debugsourceto a version that resolves this vulnerability.Fixed in 3.1.3-12.el8_4.2.aa
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:6171?
The severity of RHSA-2022:6171 is classified as important.
How do I fix RHSA-2022:6171?
To fix RHSA-2022:6171, update your rsync package to version 3.1.3-12.el8_4.2 or later.
What software is affected by RHSA-2022:6171?
RHSA-2022:6171 affects the rsync package and its associated packages like rsync-daemon and rsync-debuginfo.
When was RHSA-2022:6171 issued?
RHSA-2022:6171 was issued to address vulnerabilities related to the rsync utility.
Is RHSA-2022:6171 related to network file synchronization?
Yes, RHSA-2022:6171 is related to the rsync utility, which is used for fast file synchronization over a network.