tocsin

Debian/rsync: unknown

Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list enforcement when configured with chroot. Attackers can bypass hostn

Action: Upgrade rsync to 3.2.7-1+deb12u5 or later.

Affected

introducedfixedlast affected
03.2.7-1+deb12u5-

Fixed versions

3.2.7-1+deb12u5

Sources

published · modified · JSON