rsync: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in rsync, the worst of which can lead to denial of service or information disclosure. rsync 2024-05-08 2024-05-08 792576 838724 862876 remote 3.2.5_pre1 3.2.5_pre1

rsync is a server and client utility that provides fast incremental file transfers. It is used to efficiently synchronize files between hosts and is used by emerge to fetch Gentoo's Portage tree.

Multiple vulnerabilities have been discovered in rsync. Please review the CVE identifiers referenced below for details.

Please review the referenced CVE identifiers for details.

There is no known workaround at this time.

All rsync users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/rsync-3.2.5_pre1" CVE-2018-25032 CVE-2020-14387 CVE-2022-29154 graaff graaff