tocsin

Alpine/rsync: unknown

Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signed counter is not checked for overflow, allowing a malicious sender to trigge

Action: Upgrade rsync to 3.4.3-r0 or later.

Affected

introducedfixedlast affected
03.4.3-r0-

Fixed versions

3.4.3-r0

Sources

published · modified · JSON