starlingx/tools
Code Issues Proposed changes

Debian: rsync: fix multiple CVEs

Browse Source 
Upgrade rsync to 3.2.3-4+deb11u2

https://nvd.nist.gov/vuln/detail/CVE-2024-12085
https://nvd.nist.gov/vuln/detail/CVE-2024-12086
https://nvd.nist.gov/vuln/detail/CVE-2024-12087
https://nvd.nist.gov/vuln/detail/CVE-2024-12088
https://nvd.nist.gov/vuln/detail/CVE-2024-12747
https://security-tracker.debian.org/tracker/DLA-4015-1
https://www.tenable.com/plugins/nessus/214097

TestPlan:
PASS: downloader; build-pkgs
PASS: build-image
PASS: install on SX-lab

Closes-Bug: 2094915

Change-Id: I390c11d707ca4849b650ce723d9f3be87a0a1c91
Signed-off-by: Peng Zhang <Peng.Zhang2@windriver.com>
This commit is contained in:
Peng zhang 2025-01-16 10:19:18 +00:00 committed by Peng Zhang
parent 90cdd11017
commit 685c497fb5
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
debian-mirror-tools/config/debian/common/base-bullseye.lst
View File

@ -1203,7 +1203,7 @@ rpcbind 1.2.5-9
rpm2cpio 4.16.1.2+dfsg1-3
rpm 4.16.1.2+dfsg1-3
rpm-common 4.16.1.2+dfsg1-3
rsync 3.2.3-4+deb11u1
rsync 3.2.3-4+deb11u2 https://snapshot.debian.org/archive/debian-security/20250114T193322Z/pool/updates/main/r/rsync/rsync_3.2.3-4%2Bdeb11u2_amd64.deb
ruby 1:2.7+2
ruby2.7 2.7.4-1+deb11u2 https://snapshot.debian.org/archive/debian-security/20240902T120333Z/pool/updates/main/r/ruby2.7/ruby2.7_2.7.4-1%2Bdeb11u2_amd64.deb
ruby2.7-dev 2.7.4-1+deb11u2 https://snapshot.debian.org/archive/debian-security/20240902T120333Z/pool/updates/main/r/ruby2.7/ruby2.7-dev_2.7.4-1%2Bdeb11u2_amd64.deb