rsync: Multiple vulnerabilities

rsync: Multiple vulnerabilities Multiple vulnerabilities have been found in rsync, the worst of which could allow remote attackers to bypass access restrictions. rsync 2018-01-17 2018-01-17 636714 640570 remote 3.1.2-r2 3.1.2-r2

File transfer program to keep remote files into sync.

Multiple vulnerabilities have been discovered in rsync. Please review the CVE identifiers referenced below for details.

A remote attacker could bypass intended access restrictions or cause a Denial of Service condition.

There is no known workaround at this time.

All rsync users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=net-misc/rsync-3.1.2-r2"

CVE-2017-16548 CVE-2017-17433 CVE-2017-17434 whissi whissi