diff options
author | Archana Polampalli <archana.polampalli@windriver.com> | 2025-01-16 15:15:06 +0000 |
---|---|---|
committer | Steve Sakoman <steve@sakoman.com> | 2025-01-25 06:20:37 -0800 |
commit | dfbd3aac89fe9344d752ff8e77f0afe25bcd6866 (patch) | |
tree | a2fb5b6d42d5cf1b3d4330b222ae67365715e0db /meta/recipes-devtools/rsync/files/CVE-2024-12087-0002.patch | |
parent | b8832293c542062a1f1277f54df06c6309034a4d (diff) | |
download | poky-dfbd3aac89fe9344d752ff8e77f0afe25bcd6866.tar.gz |
rsync: fix CVE-2024-12086
A flaw was found in rsync. It could allow a server to enumerate the contents of an
arbitrary file from the client's machine. This issue occurs when files are being
copied from a client to a server. During this process, the rsync server will send
checksums of local data to the client to compare with in order to determine what
data needs to be sent to the server. By sending specially constructed checksum values
for arbitrary files, an attacker may be able to reconstruct the data of those files
byte-by-byte based on the responses from the client.
(From OE-Core rev: 19f4e7bd965c63f19cc756e6e2bf8f58d9e1dc8d)
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'meta/recipes-devtools/rsync/files/CVE-2024-12087-0002.patch')
0 files changed, 0 insertions, 0 deletions