openbsd-ports/net/rsync/pkg/SECURITY
naddy d9dfbac878 update to 2.5.1; partly from and ok espie@
IPv6 support remains disabled for now
2002-01-14 23:07:49 +00:00

10 lines
353 B
Plaintext

$OpenBSD: SECURITY,v 1.5 2002/01/14 23:07:49 naddy Exp $
The server makes extensive use of strlcpy/strlcat/snprintf.
rsync upto 2.3.0 has a security hole. If rsync --version is less or equal
to that, you should upgrade.
rsync 2.3.1 has security holes in the rsyncd daemon when run with
chroot=no. If you are using that feature, you should upgrade.