Critical Rsync Vulnerabilities: Remote Code Execution Possible

Researchers have uncovered six vulnerabilities in rsync, the most critical of which allows remote code execution on a server with only anonymous read access to a public rsync mirror. These vulnerabilities range from heap buffer overflows and information leaks to path traversal and race conditions. The vulnerabilities are patched in rsync 3.4.0; users are urged to update immediately.