RHBA-2011:1112 - Bug Fix Advisory

Topic

An updated rsync package that fixes a bug is now available for Red Hat
Enterprise Linux 5.

Description

The rsync tool is used to copy and synchronize files locally or across a
network. The rsync works very fast because it uses delta encoding and sends just
differences in files instead of whole files. The rsync is also used as powerful
mirroring tool.

This updated rsync package fixes the following bug:

• The RHSA-2011-0999 - Moderate: rsync security, bug fix and enhancement update,

which was applied with the rsync tool update to version 3.0.6-4, introduced a
patch which fixed the issue with missing memory deallocation. Due to an error in
that patch, the following new issue appeared: when specifying the source or
destination argument of the rsync command without the optional user@ argument,
rsync failed to provide the correct parameters to an external command, such as
ssh, and thus rsync failed with an error. With this update, the source code has
been modified to fix this issue. (BZ#726060)

All users of rsync are advised to upgrade to this updated package, which
resolves this issue.

Solution

Before applying this update, make sure that all previously-released errata
relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat
Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 726060 - rsync 3.0.6 fails on hostname:/path syntax

CVEs

(none)

References

• http://rhn.redhat.com/errata/RHSA-2011-0999.html