Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://fosstodon.org/users/ncopa/statuses/113831524097301698">Natanael Copa (ncopa@fosstodon.org)'s status on Wednesday, 15-Jan-2025 17:57:45 JST</a><a href="https://fosstodon.org/@ncopa" title="ncopa@fosstodon.org"><img src="https://gnusocial.jp/avatar/218704-48-20231129210320.webp" width="48" height="48" alt="Natanael Copa" style="position: absolute; left: 0; top: 0;">Natanael Copa</a></section><article><p>rsync has some really serious CVEs[1], but the 3.4.0 release with the fixes has regressions[2] that will break things for people. What to do?</p><p>[1]: <a href="https://www.openwall.com/lists/oss-security/2025/01/14/3" rel="nofollow noreferrer">https://www.openwall.com/lists/oss-security/2025/01/14/3</a><br>[2]: <a href="https://github.com/RsyncProject/rsync/issues/702" rel="nofollow noreferrer">https://github.com/RsyncProject/rsync/issues/702</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/4377946#notice-8562225">In conversation</a><time datetime="2025-01-15T17:57:45+09:00" title="Wednesday, 15-Jan-2025 17:57:45 JST">about 15 days ago</time> <span>from <span><a href="https://fosstodon.org/@ncopa/113831524097301698" rel="external" title="Sent from fosstodon.org via ActivityPub">fosstodon.org</a></span></span><a href="https://fosstodon.org/@ncopa/113831524097301698">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: www.openwall.com</div><h5><a href="https://www.openwall.com/lists/oss-security/2025/01/14/3">oss-security - RSYNC: 6 vulnerabilities</a></h5><div></div></header><div></div><footer></footer></article></li><li><article><header><div>Domain not in remote thumbnail source whitelist: opengraph.githubassets.com</div><h5><a href="https://github.com/RsyncProject/rsync/issues/702">3.4.0 -H flag broken · Issue #702 · RsyncProject/rsync</a></h5><div></div></header><div>Consider the following rsync -aH: bob# rsync -aH bob:/opt/src/git-doc . ABORTING due to invalid path from sender: git-doc/.vale/vale.tmpl rsync: connection unexpectedly closed (322182 bytes receive...</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Natanael Copa (ncopa@fosstodon.org)'s status on Wednesday, 15-Jan-2025 17:57:45 JST Natanael Copa
rsync has some really serious CVEs[1], but the 3.4.0 release with the fixes has regressions[2] that will break things for people. What to do?
[1]: https://www.openwall.com/lists/oss-security/2025/01/14/3
[2]: https://github.com/RsyncProject/rsync/issues/702
In conversationabout 15 days ago from fosstodon.orgpermalink
Attachments
1. Domain not in remote thumbnail source whitelist: www.openwall.com
  oss-security - RSYNC: 6 vulnerabilities
2. Domain not in remote thumbnail source whitelist: opengraph.githubassets.com
  3.4.0 -H flag broken · Issue #702 · RsyncProject/rsync
  Consider the following rsync -aH: bob# rsync -aH bob:/opt/src/git-doc . ABORTING due to invalid path from sender: git-doc/.vale/vale.tmpl rsync: connection unexpectedly closed (322182 bytes receive...

Public

Embed Notice

HTML Code

Corresponding Notice