Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Update to net-misc/rsync-3.2.5_pre1
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
ChrisJumper
Advocate
Advocate


Joined: 12 Mar 2005
Posts: 2352
Location: Germany

PostPosted: Fri Aug 05, 2022 9:18 pm    Post subject: Update to net-misc/rsync-3.2.5_pre1 Reply with quote

Hi there,

sorrry for burning your home but... some folks maybe use rsync to overwrite your ssh key.

It is still masked, so you have to unmask it, before emergeing:
Code:

# echo "=net-misc/rsync-3.2.5_pre1::gentoo **" >> /etc/portage.unmask/something
# echo "=net-misc/rsync-3.2.5_pre1 **" >> /etc/portage.accepted_keywords/something


I might got nudged by some security interested folks.. but if they are right, they use it to overwrite .ssh/authorized_keys.

Update!


Last edited by ChrisJumper on Fri Aug 05, 2022 10:01 pm; edited 1 time in total
Back to top
View user's profile Send private message
mike155
Advocate
Advocate


Joined: 17 Sep 2010
Posts: 3950
Location: Frankfurt, Germany

PostPosted: Fri Aug 05, 2022 9:43 pm    Post subject: Reply with quote

See:
  1. https://www.cve.org/CVERecord?id=CVE-2022-29154

  2. https://nvd.nist.gov/vuln/detail/CVE-2022-29154
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum