tocsin

Alpine/rsync: unknown

rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input configuration file

Action: Upgrade rsync to 3.5.0-r0 or later.

Affected

introducedfixedlast affected
03.5.0-r0-

Fixed versions

3.5.0-r0

Sources

published · modified · JSON