Rsync Security Shake-Up: Fixes Arrive Just in Time, No Attacks Yet!
Rsync’s got a lot of computers feeling that syncing feeling with six new CVEs. But fear not! Rsync 3.4.0 swooped in, fixing them quicker than a cat on a laser pointer. Just update, and you’re safe from those pesky vulnerabilities, which are more ancient than dial-up modems.
Hot Take:
Oh, rsync, you magical syncing unicorn! You’ve been around since 1996, galloping across networks with your superpowers, only to be found hiding in the bushes with a heap of vulnerabilities. But worry not, for the knights of cybersecurity have come to the rescue with patches on speed dial!
Key Points:
- Six vulnerabilities in rsync were announced on January 14, with one rated as critical (CVSS score of 9.8).
- All flaws are fixed in rsync version 3.40, released the day after the announcement, with a further fix in version 3.4.1.
- Linux distributors, like Canonical, swiftly issued updates for affected systems.
- Google security researchers and a TikTok pen-tester identified these vulnerabilities.
- Microsoft’s alternative, Remote Differential Compression, is now a deprecated feature.
Already a member? Log in here