[GoLUG] Fw: [PLUG] rsync flaws

[Steve Litt]

Begin forwarded message:

Date: Wed, 15 Jan 2025 10:16:50 -0500
From: jeffv via plug <plug at lists.phillylinux.org>
To: Philadelphia Linux User's Group Discussion List
Get updated quick!

======== original message below ============


<plug at lists.phillylinux.org> Subject: [PLUG] rsync flaws


Google Cloud Researchers Uncover Flaws in Rsync File Synchronization
Tool

https://thehackernews.com/2025/01/google-cloud-researchers-uncover-flaws.html

As many as six security vulnerabilities have been disclosed in the 
popular Rsync file-synchronizing tool for Unix systems, some of which 
could be exploited to execute arbitrary code on a client.

"Attackers can take control of a malicious server and read/write 
arbitrary files of any connected client," the CERT Coordination Center 
(CERT/CC) said in an advisory. "Sensitive data, such as SSH keys, can
be extracted, and malicious code can be executed by overwriting files
such as ~/.bashrc or ~/.popt."
___________________________________________________________________________
Philadelphia Linux Users Group
--        http://www.phillylinux.org Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion
--   http://lists.phillylinux.org/mailman/listinfo/plug