rsync 3.4.3 security release, fixes 6 CVEs

Andrew Tridgell via rsync <[email protected]> Wed, 20 May 2026 10:28:22 +1000
Newsgroups gmane.network.rsync.general,gmane.network.rsync.announce
Message-ID <CAAbv5GYwBr3G53CEPxiW5MnFKu40csQ1c_BkbTgPVrtBeJ_AOw@mail.gmail.com>
I have just released rsync 3.4.3 which fixes 6 CVEs. The release was
coordinated with distros, so vendors should have security updates out
shortly.
For details of the CVEs see:
https://download.samba.org/pub/rsync/NEWS.html
Many thanks to the security researchers who reported the issues and
worked with me on getting the fixes out.
Cheers, Tridge

-- 
Please use reply-all for most replies to avoid omitting the mailing list.
To unsubscribe or change options: https://lists.samba.org/mailman/listinfo/rsync
Before posting, read: http://www.catb.org/~esr/faqs/smart-questions.html