SUSE-RU-2023:3370-1: rsync&distro=SUSE Enterprise Storage 7.1 SUSE Linux Enterprise
Vulnerability summary
SUSE-RU-2023:3370-1 is a vulnerability in rsync&distro=SUSE Enterprise Storage 7.1 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 22-08-2023PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Recommended update for rsync This update for rsync fixes the following issues: - Update to version 3.2.3 (jsc#SLE-21252, jsc#PED-3146) - Add support for using --atimes to preserve atime of files in destination sync (jsc#PED-3145) - Remove SuSEfirewall2 service as this was replaced by firewalld (which already provides a rsyncd service). - Fix --delay-updates never updates after interruption (bsc#1204538) - Arbitrary file write vulnerability via do_server_recv function (bsc#1201840, CVE-2022-29154) - rsync-ssl: Verify the hostname in the certificate when using openssl. (bsc#1176160, CVE-2020-14387)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse16 products
- rsync&distro=SUSE Enterprise Storage 7.1< 3.2.3-150000.4.23.2
- rsync&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 3.2.3-150000.4.23.2
- rsync&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 3.2.3-150000.4.23.2
- rsync&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS< 3.2.3-150000.4.23.2
- rsync&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 3.2.3-150000.4.23.2
1 vendor · 16 products