Joined: 12 May 2004
|Posted: Mon May 30, 2016 8:26 pm Post subject: [ GLSA 201605-04 ] rsync
|Gentoo Linux Security Advisory
Title: rsync: Multiple vulnerabilities (GLSA 201605-04)
Date: May 30, 2016
Bug(s): #519108, #540000, #569140
Multiple vulnerabilities have been found in rsync, the worst of
which could allow remote attackers to write arbitrary files.
File transfer program to keep remote files into sync.
Vulnerable: < 3.1.2
Unaffected: >= 3.1.2
Architectures: All supported architectures
Multiple vulnerabilities have been discovered in rsync. Please review
the CVE identifiers referenced below for details.
Remote attackers could write arbitrary files via symlink attacks.
There is no known workaround at this time.
All rsync users should upgrade to the latest version:
|# emerge --sync
# emerge --ask --oneshot --verbose ">=net-misc/rsync-3.1.2"