rsync 3.5.0 released
Version3.5.0 of rsync has been released with a hugenumber of security fixes:
This release fixes 33 security issues found during a focused audit ofrsync's path handling and daemon protocol, a companion daemon-protocolfuzzing pass, and reports from external researchers -- plus severalrobustness hardenings. CVE IDs were assigned by VulnCheck (CNA); theprecise "introduced in" version ranges accompany each advisory, andmany are much narrower than "everything before 3.5.0". Every fix shipswith a regression test in the test suite that fails on the unfixedtree.