new release 3.4.0 - critical security release

--===============7785406604089250763==
Content-Type: multipart/alternative; boundary="0000000000001e0430062bafdb1f"

--0000000000001e0430062bafdb1f
Content-Type: text/plain; charset="UTF-8"

We have just released version 3.4.0 of rsync. This release fixes 6 security
vulnerabilities found by two groups of security researchers.

You can find the new release links here:

 - https://rsync.samba.org/
 - https://download.samba.org/pub/rsync/src/

For details on the vulnerabilities please see this CERT advisory:

https://kb.cert.org/vuls/id/952657

The various distros should be doing security releases today
Many thanks to Simon Scannell, Pedro Gallegos, and Jasiel Spelman at Google
Cloud Vulnerability Research and Aleksei Gorban (Loqpa) for discovering
these vulnerabilities and working with the rsync project to develop and
test fixes.

Also many thanks to Wayne Davison for assisting with the release process as
this is the first release I've done since 2002 when Wayne took over as the
rsync maintainer.

Andrew Tridgell
rsync maintainer (again!)

--0000000000001e0430062bafdb1f
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">We have just released version 3.4.0 of rsync. This release=
 fixes 6 security vulnerabilities found by two groups of security researche=
rs.<div><br></div><div>You can find the new release links here:</div><div><=
br></div><div>=C2=A0- <a href=3D"https://rsync.samba.org/">https://rsync.sa=
mba.org/</a></div><div>=C2=A0-=C2=A0<a href=3D"https://download.samba.org/p=
ub/rsync/src/">https://download.samba.org/pub/rsync/src/</a></div><div><br>=
<div>For details on the vulnerabilities please see this CERT advisory:</div=
><div><br></div><div><a href=3D"https://kb.cert.org/vuls/id/952657">https:/=
/kb.cert.org/vuls/id/952657</a></div><div><br></div><div>The various distro=
s should be doing security releases today</div><div>Many thanks to Simon Sc=
annell, Pedro Gallegos, and Jasiel Spelman at Google Cloud Vulnerability Re=
search and Aleksei Gorban (Loqpa) for discovering these vulnerabilities and=
 working with the rsync project to develop and test fixes.<br></div><div><b=
r></div><div>Also many thanks to Wayne Davison for assisting with the relea=
se process as this is the first release I&#39;ve done since 2002 when Wayne=
 took over as the rsync maintainer.</div><div><br></div><div>Andrew Tridgel=
l</div><div>rsync maintainer (again!)</div><div><br></div><div><br></div></=
div></div>

--0000000000001e0430062bafdb1f--


--===============7785406604089250763==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
Please use reply-all for most replies to avoid omitting the mailing list.
To unsubscribe or change options: https://lists.samba.org/mailman/listinfo/rsync
Before posting, read: http://www.catb.org/~esr/faqs/smart-questions.html

--===============7785406604089250763==--