rsync 3.5.0 security release - 33 CVEs
Andrew Tridgell via rsync <[email protected]>
| Newsgroups | gmane.network.rsync.general,gmane.network.rsync.announce |
|---|---|
| Message-ID | <CAAbv5GaZzzMjdOukSgR80Vb-5me7O5LM63RmNngo0USto_onFQ@mail.gmail.com> |
We've just made the rsync 3.5.0 security release public. This release is a major security update with 33 CVEs and a lot of extra security hardening work. Download from https://rsync.samba.org/ For details of the changes and the CVEs see: https://download.samba.org/pub/rsync/NEWS#3.5.0 For more information on the security approach taken in this release see: https://github.com/RsyncProject/rsync/blob/master/SECURITY.md It is strongly recommended that all users update to this release. We have also made backports to 3.4.1 and 3.2.7 available to the distros with all the relevant security fixes. We expect updated releases for the LTS distros to happen in the next couple of days. Many thanks to everyone who helped with this release! Cheers, Tridge -- Please use reply-all for most replies to avoid omitting the mailing list. To unsubscribe or change options: https://lists.samba.org/mailman/listinfo/rsync Before posting, read: http://www.catb.org/~esr/faqs/smart-questions.html