rsync 3.5.0 security release - 33 CVEs

Andrew Tridgell via rsync <[email protected]>
Newsgroups gmane.network.rsync.general,gmane.network.rsync.announce
Message-ID <CAAbv5GaZzzMjdOukSgR80Vb-5me7O5LM63RmNngo0USto_onFQ@mail.gmail.com>
We've just made the rsync 3.5.0 security release public. This release
is a major security update with 33 CVEs and a lot of extra security
hardening work.
Download from https://rsync.samba.org/
For details of the changes and the CVEs see:
https://download.samba.org/pub/rsync/NEWS#3.5.0
For more information on the security approach taken in this release see:
https://github.com/RsyncProject/rsync/blob/master/SECURITY.md
It is strongly recommended that all users update to this release.
We have also made backports to 3.4.1 and 3.2.7 available to the
distros with all the relevant security fixes. We expect updated
releases for the LTS distros to happen in the next couple of days.
Many thanks to everyone who helped with this release!
Cheers, Tridge

-- 
Please use reply-all for most replies to avoid omitting the mailing list.
To unsubscribe or change options: https://lists.samba.org/mailman/listinfo/rsync
Before posting, read: http://www.catb.org/~esr/faqs/smart-questions.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.