oss-security - Re: [CVE Requests] rsync and librsync collisions

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 5 Aug 2014 16:17:41 +1000
From: Michael Samuel <mik@...net.net>
To: oss-security@...ts.openwall.com
Subject: Re: [CVE Requests] rsync and librsync collisions

On 5 August 2014 16:12, Loganaden Velvindron <loganaden@...il.com> wrote:
> Can you please post at least a PoC or steps that others can use to
> reproduce the issues in rsync and librsync ?
>
> IMHO, that would *really* help.

I have provided a privileged few with PoC to help grease the wheels.

My plan was to wait for fixes before releasing the full write-up and code.

Regards,
  Michael

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.