rsync 3.5.0 security release - 33 CVEs
Andrew Tridgell
tridge60 at gmail.com
Thu Aug 13 00:33:44 UTC 2026
We've just made the rsync 3.5.0 security release public. This release
is a major security update with 33 CVEs and a lot of extra security
hardening work.
Download from https://rsync.samba.org/
For details of the changes and the CVEs see:
https://download.samba.org/pub/rsync/NEWS#3.5.0
For more information on the security approach taken in this release see:
https://github.com/RsyncProject/rsync/blob/master/SECURITY.md
It is strongly recommended that all users update to this release.
We have also made backports to 3.4.1 and 3.2.7 available to the
distros with all the relevant security fixes. We expect updated
releases for the LTS distros to happen in the next couple of days.
Many thanks to everyone who helped with this release!
Cheers, Tridge
More information about the rsync
mailing list