INFRA Signal 543
rsync 3.5.0 fixes 33 security issues from path-handling and daemon audit
↗
Illustration only Photo by Taylor Vick on Unsplash
rsync 3.5.0 is released with 33 security fixes from a focused audit of path handling and the daemon protocol, plus robustness hardenings.
rsync is widely used for file transfer and backup, so these security fixes address vulnerabilities that could be exploited via malicious paths or daemon interactions. Upgrading to 3.5.0 is important because each fix includes a regression test, ensuring the fixes are reliable.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
rsync 3.5.0 fixes 33 security issues found during a focused audit.
The audit covered path handling and the daemon protocol, with fuzzing and external reports.
Every fix ships with a regression test that fails on the unfixed tree.
THE CLUSTER