- sec. fix - see http://securitytracker.com/alerts/2004/Aug/1010940.html

Changed files:
    rsync-sec.patch -> 1.1

diff --git a/rsync-sec.patch b/rsync-sec.patch
new file mode 100644 (file)
index 0000000..064aabe
--- /dev/null
+++ b/rsync-sec.patch
@@ -0,0 +1,12 @@
+diff -Nura rsync-2.6.2.bef/util.c rsync-2.6.2.new/util.c
+--- rsync-2.6.2.bef/util.c     2004-04-27 21:59:37.000000000 +0200
++++ rsync-2.6.2.new/util.c     2004-08-16 10:26:24.000000000 +0200
+@@ -743,7 +743,7 @@
+                               allowdotdot = 1;
+                       } else {
+                               p += 2;
+-                              if (*p == '/')
++                              while (*p == '/')
+                                       p++;
+                               if (sanp != start) {
+                                       /* back up sanp one level */