Bug 33957 - rsync: security issues
Summary: rsync: security issues
Status: RESOLVED DUPLICATE of bug 33920
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 9
Hardware: All Linux
Priority: Normal major
Target Milestone: ---
Assignee: Mageia Bug Squad
QA Contact: Sec team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2025-01-24 10:24 CET by Marc Krämer
Modified: 2025-01-24 12:40 CET (History)
2 users (show)

See Also:
Source RPM: rsync
CVE: CVE-2024-12084 CVE-2024-12085 CVE-2024-12086 CVE-2024-12087 CVE-2024-12088 CVE-2024-12747
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Marc Krämer 2025-01-24 10:25:38 CET

CVE: (none) => CVE-2024-12084 CVE-2024-12085 CVE-2024-12086 CVE-2024-12087 CVE-2024-12088 CVE-2024-12747

Comment 1 Nicolas Salguero 2025-01-24 10:27:56 CET 
Hi,

Those CVEs were already fixed in bug 33920.

Best regards,

*** This bug has been marked as a duplicate of bug 33920 ***

Status: NEW => RESOLVED
Resolution: (none) => DUPLICATE
CC: (none) => nicolas.salguero

Comment 2 Marc Krämer 2025-01-24 10:38:50 CET 
did not find it with the search in the bugtracker.
Comment 3 Morgan Leijström 2025-01-24 12:00:59 CET 
@Marc, this works:
https://bugs.mageia.org/buglist.cgi?component=RPM%20Packages&component=Security&email1=fri%40tribun.e&emailtype1=substring&list_id=185297&order=Importance&product=Mageia&query_format=advanced&short_desc=rsync&short_desc_type=allwordssubstr&version=9

Maybe you forgot to select "security" in the "Component" selection?
-an rpm update bug classified as security, will not be found if not.
I have made that mistake myself.
Now, I use to always select both RPM and Security when I look for bugs.

CC: (none) => fri

Comment 4 Marc Krämer 2025-01-24 12:40:59 CET 
hmm. I searched for the cve.
The problem is I had to select all Status and all Resolutions to get the report. I thought "---" is equal to selecting all.

Try to remember that for my next search :)
Note You need to log in before you can comment on or make changes to this bug.