Multiple vulnerabilities have been found in rsync, the worst of which could result in a Denial of Service condition.
|Package||net-misc/rsync on all architectures|
|Affected versions||< 3.2.0|
|Unaffected versions||>= 3.2.0|
File transfer program to keep remote files into sync.
Multiple vulnerabilities have been discovered in rsync (within bundled zlib). Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All rsync users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/rsync-3.2.0"
July 28, 2020
July 28, 2020: 1