rsync: Multiple vulnerabilities Multiple vulnerabilities have been found in rsync, the worst of which could allow remote attackers to write arbitrary files. 2016-05-30 2016-05-30 519108 540000 569140 remote 3.1.2 3.1.2

File transfer program to keep remote files into sync.

Multiple vulnerabilities have been discovered in rsync. Please review the CVE identifiers referenced below for details.

Remote attackers could write arbitrary files via symlink attacks.

There is no known workaround at this time.

All rsync users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/rsync-3.1.2"
CVE-2014-8242 CVE-2014-9512 BlueKnight b-man