[OmniOS-discuss] rsync 3.1.2 & security fix

Bob Friesenhahn bfriesen at simple.dallas.tx.us
Tue Dec 22 02:05:54 UTC 2015


On Mon, 21 Dec 2015, Dan McDonald wrote:

>
>> On Dec 21, 2015, at 4:29 PM, Bob Friesenhahn <bfriesen at simple.dallas.tx.us> wrote:
>>
>> Rsync 3.1.2 is out and contains a security fix.  OmniOS seems to be using 3.1.1.  See "http://rsync.samba.org/ftp/rsync/src/rsync-3.1.2-NEWS".
>
> So much for a full vacation day...
>
> Watch this space for an update later this evening.
>
> Thank you for pointing this out, security is important!!!

This is yet another case where the sending side can send something bad 
to cause harm to the recipient.  It is only a problem if you don't 
trust the sending side.

I agree that security is important.

Bob
-- 
Bob Friesenhahn
bfriesen at simple.dallas.tx.us, http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/


More information about the OmniOS-discuss mailing list