Bugzilla Bug 131631

Integer overflow in the receive_xattr function in the extended
attributes patch (xattr.c) for rsync before 2.6.8 might allow
attackers to execute arbitrary code via crafted extended attributes
that trigger a buffer overflow.

This is fixed in 2.6.8 which is already in the tree but the advisory is not
public yet.

Arch Security Liaisons please test and mark stable.

x86 all done :)

ppc stable

stable on ppc64

amd64 stable.

sparc stable.

hppa stable

Stable on alpha + ia64.

jaervosz: this is already stable on ppc64. or do I miss an argument why you
CC'd us again? Please readd, if I missunderstand this...

Ready for GLSA. For the drafter :

<< The vulnerable function is only present when the rsync binary was compiled
with the configuration option --enable-xattr-support. This is enabled by
default on Fedora Core 5.

Furthermore, for the rsync server daemon to be exploited, an attacker must
have write access to a module on the server. This is due to the vulnerable
code being called only from the recv_file_list() function, which is used
when receiving files from the connected peer. >>

USE=acl triggers the --enable-xattr-support for Gentoo.

rsync has only ~ppc-macos keywords (no stable keyword for any version).  In
package.mask.  Not stabling.

GLSA 200605-05

arm, mips, s390 don't forget to mark stable to benefit from the GLSA.

Stable on mips.