
rsync 3.5.2 fixes CPU exhaustion flaw
3.5.2 prevents malicious checksum attacks and adds priority controls.
3 stories, newest first · one card per story

3.5.2 prevents malicious checksum attacks and adds priority controls.
The Perl automation tool hardcodes StrictHostKeyChecking=no for remote rsync, so an unknown SSH host key is accepted.
Debian bumps rsync to 3.5.0 on Trixie to fix 33 CVEs, with breaking security changes.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views