RE: rsync 3.5.0 security release - 33 CVEs

Is there any way to convince Rsync not to use poll()? I think it was made
mandatory at 3.5.0 even though it is not supposed to be used for modern
development and is not available on some platforms?

Thanks,
Randall


> -----Original Message-----
> From: rsync <[email protected]> On Behalf Of Andrew Tridgell
via
> rsync
> Sent: August 12, 2026 8:34 PM
> To: [email protected]; [email protected]
> Subject: rsync 3.5.0 security release - 33 CVEs
> 
> We've just made the rsync 3.5.0 security release public. This release
> is a major security update with 33 CVEs and a lot of extra security
> hardening work.
> Download from https://rsync.samba.org/
> For details of the changes and the CVEs see:
> https://download.samba.org/pub/rsync/NEWS#3.5.0
> For more information on the security approach taken in this release see:
> https://github.com/RsyncProject/rsync/blob/master/SECURITY.md
> It is strongly recommended that all users update to this release.
> We have also made backports to 3.4.1 and 3.2.7 available to the
> distros with all the relevant security fixes. We expect updated
> releases for the LTS distros to happen in the next couple of days.
> Many thanks to everyone who helped with this release!
> Cheers, Tridge
> 
> --
> Please use reply-all for most replies to avoid omitting the mailing list.
> To unsubscribe or change options:
https://lists.samba.org/mailman/listinfo/rsync
> Before posting, read: http://www.catb.org/~esr/faqs/smart-questions.html


-- 
Please use reply-all for most replies to avoid omitting the mailing list.
To unsubscribe or change options: https://lists.samba.org/mailman/listinfo/rsync
Before posting, read: http://www.catb.org/~esr/faqs/smart-questions.html