Описание
librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| librsync | fixed | 1.0.0-1~exp1 | experimental | package |
| librsync | fixed | 2.0.2-1 | package | |
| librsync | ignored | buster | package | |
| librsync | ignored | stretch | package | |
| librsync | no-dsa | jessie | package | |
| librsync | no-dsa | wheezy | package | |
| librsync | no-dsa | squeeze | package |
EPSS
Связанные уязвимости
librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack.
librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack.
librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack.
ALT-PU-2022-1770: package `librsync` update to version 2.3.2-alt2
ALT-PU-2022-1299: package `librsync` update to version 2.3.2-alt1
EPSS