From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <overseers-return-6369-listarch-overseers=sources.redhat.com@sources.redhat.com>
Received: (qmail 15238 invoked by alias); 4 Dec 2003 11:14:32 -0000
Mailing-List: contact overseers-help@sources.redhat.com; run by ezmlm
Precedence: bulk
List-Archive: <http://sources.redhat.com/ml/overseers/>
List-Post: <mailto:overseers@sources.redhat.com>
List-Help: <mailto:overseers-help@sources.redhat.com>,
	<http://sources.redhat.com/ml/#faqs>
Sender: overseers-owner@sources.redhat.com
Received: (qmail 15228 invoked from network); 4 Dec 2003 11:14:30 -0000
Received: from unknown (HELO mx1.redhat.com) (66.187.233.31)
  by sources.redhat.com with SMTP; 4 Dec 2003 11:14:30 -0000
Received: from int-mx1.corp.redhat.com (int-mx1.corp.redhat.com [172.16.52.254])
	by mx1.redhat.com (8.11.6/8.11.6) with ESMTP id hB4BEU207431
	for <overseers@sources.redhat.com>; Thu, 4 Dec 2003 06:14:30 -0500
Received: from lacrosse.corp.redhat.com (lacrosse.corp.redhat.com [172.16.52.154])
	by int-mx1.corp.redhat.com (8.11.6/8.11.6) with ESMTP id hB4BEU215443;
	Thu, 4 Dec 2003 06:14:30 -0500
Received: from localhost (mgalgoci@localhost)
	by lacrosse.corp.redhat.com (8.11.6/8.11.6) with ESMTP id hB4BETq01137;
	Thu, 4 Dec 2003 06:14:30 -0500
X-Authentication-Warning: lacrosse.corp.redhat.com: mgalgoci owned process doing -bs
Date: Thu, 04 Dec 2003 11:14:00 -0000
From: Matthew Galgoci <mgalgoci@redhat.com>
X-X-Sender: mgalgoci@lacrosse.corp.redhat.com
To: Jason Molenda <jason-swarelist@molenda.com>
cc: Arjan van de Ven <arjanv@redhat.com>, <overseers@sources.redhat.com>
Subject: Re: remote rsync exploit wants disabling NOW
In-Reply-To: <20031204013342.A42780@molenda.com>
Message-ID: <Pine.LNX.4.44.0312040613160.710-100000@lacrosse.corp.redhat.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-SW-Source: 2003-q4/txt/msg00215.txt.bz2

On Thu, 4 Dec 2003, Jason Molenda wrote:

> On Thu, Dec 04, 2003 at 10:16:32AM +0100, Arjan van de Ven wrote:
> > see subject and
> > 
> > http://www.heise.de/newsticker/data/ju-04.12.03-001/
> 
> Or in English,
> 	http://rsync.samba.org/
> 
> This is best handled by Chris Faylor - we don't need to discuss it
> on the overseers list any further.  Rebuilding rsync is trivial,
> whichever form of rebuilding he prefers for the system; this will
> be fixed quickly.
> 
> Thanks for the heads up.

I've temporarily blocked rsync at the router until we can get the fix applied.

-- 
Matthew Galgoci
System Administrator
Red Hat, Inc
919.754.3700 x44155