online community of new and seasoned Linux / Unix sysadmins.
Critical Rsync Vulnerability Requires Immediate Patching on Linux and Unix systems
15 January 2025 @ 6:04 pm
Rsync is a opensource command-line tool in Linux, macOS, *BSD and Unix-like systems that synchronizes files and directories. It is a popular tool for sending or receiving files, making backups, or setting up mirrors. It minimizes data copied by transferring only the changed parts of files, making it faster and more bandwidth-efficient than traditional copying methods provided by tools like sftp or ftp-ssl. Rsync versions 3.3.0 and below has been found with SIX serious vulnerabilities. Attackers could exploit these to leak your data, corrupt your files, or even take over your system. There is a heap-based buffer overflow with a CVSS score of 9.8 that needs to be addressed on both the client and server sides of rsync package. Apart from that info leak via uninitialized stack contents defeats ASLR protection and rsync server can make client write files outside of destination directory using symbolic links.
Love this? sudo share_on:
How to control the SSH multiplexing with the control commands
15 January 2025 @ 8:29 am

ZFS Raidz Expansion Finally, Here in version 2.3.0
14 January 2025 @ 9:19 am
After years of development and testing, the ZFS raidz expansion is finally here and has been released as part of version 2.3.0. ZFS is a popular file system for Linux and FreeBSD. RAIDz is like RAID 5, which you find with hardware or Linux software raid devices. It protects your data by spreading it across multiple hard disks along with parity information. A raidz device can have single, double, or triple parity to sustain one, two, or three hard disk failures, respectively, without losing any data. Hence, expanding or adding a new HDD is a very handy feature for sysadmins in today's data-sensitive apps.
Love this? sudo share_on: Twitter -
How to run Docker inside Incus containers
18 December 2024 @ 5:44 am

MySQL Change root Password Command
9 December 2024 @ 4:19 pm

How to enable mouse to copy & paste in vim
28 November 2024 @ 1:44 pm

How to install vnstat on Debian 12/11 to monitor network interface bandwidth usage
27 November 2024 @ 7:07 pm

How to find hard disk (SSD) serial numbers in Linux
16 November 2024 @ 9:38 pm

How to install kvm-ok on Debian or Ubuntu Linux
16 November 2024 @ 6:54 am

zcommands: Read gzip Compressed Text Files On a Fly on Linux and Unix
1 November 2024 @ 8:34 pm
