Re: Serious rsync security issues

From: Ralf Mardorf <ralf-mardorf_at_riseup.net>
Date: Fri, 17 Jan 2025 15:13:45 UTC
On Fri, 2025-01-17 at 09:54 -0500, Vincent Miller wrote:
> Up to version 3.4.0?

Regarding the Arch Linux Announce Mailing List < 3.4.0, but >= 3.4.0 is
not affected [1].

[1]
-------- Forwarded Message --------
From: Arch Linux: Recent news updates: Robin Candau
<arch-announce@lists.archlinux.org>
To: arch-announce@lists.archlinux.org
Subject: [arch-announce] Critical rsync security release 3.4.0
Date: 01/16/2025 04:33:43 PM

[snip]

We highly advise anyone who runs an rsync daemon or client prior to
version `3.4.0-1` to upgrade and reboot their systems immediately.

[snip]