On 20 November 2014 17:55, <cve-ass...@mitre.org> wrote: > Use CVE-2014-8990. The scope of this CVE ID includes both: > 2. denial of service scenarios in which a user with write access > to a local directory uses special characters to make > synchronization fail (might have security relevance in some > scenarios)
Note that you can still make synchronization fail, because it calls rsync to perform the synchronization. See https://github.com/therealmik/rsync-collision for some precomputed blocks Regards, Michael -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
