New rsync Released to Fix Vulnerability

cshields2 writes "Today the rsync developers have released a new version that fixes an exploitable security vulnerability when running rsync as an 'rsync server.' Any server out there running rsync should check this out and upgrade if necessary. (which is every open source mirror server out there, and many mirrors themselves)"

rsync

[Anonymous Coward]

News Flash:

rsync releases a patch and changes its name to r'sync. The change is noted to increase its name recognition in the teenybopper script kiddie market. At this point, no pimply-faced l337 d00dz will dare deface r'sync for fear that they will be further alienated by the female species.

Unfortunately, timberlake and FatOne continue to be backdoored.

Re:chroot

[Anonymous Coward]

perhaps they were saving themselves for chmarriage

*boomtish*

*ducks flying rotten fruit*

this is why i dont use any package management

[n0k14]

i do it the slack way.

Re:Advice for everybody:

[Anonymous Coward]

Also, patch every box which you root thanks to linux and rsync security problems.

arg.

[mikeee]

Of course, to patch this, you should go to your local mirror, which will be down until they patch the rsync vulnerablity...

Doh!

Re:rsync

[prog-guru]

Rsync is also the preferred transfer method of pirates, software and treasure hunting ('arrr sync').

SSR#4

[Anonymous Coward]

This calls for Standard Slashdot Response #4:
Yay! This was so fast. Even when we suck we don't suck!