Re: CVE-2022-29154 and v3.2.3

2022-08-18 Thread Mark Esler via rsync
Hi Wayne, Thank you for your detailed answer and links. Gratefully, Mark Esler On Wed, Aug 17, 2022 at 6:52 PM Wayne Davison wrote: > > On Wed, Aug 17, 2022 at 9:30 AM Mark Esler wrote: >> >> I am curious if CVE-2022-29154 affects rsync 3.2.3 or rrsync 3.2.3 and >> earlier. > > > The security

Re: CVE-2022-29154 and v3.2.3

2022-08-17 Thread Wayne Davison via rsync
On Wed, Aug 17, 2022 at 9:30 AM Mark Esler wrote: > I am curious if CVE-2022-29154 affects rsync 3.2.3 or rrsync 3.2.3 and > earlier. The security page covers this: it's all versions prior to 3.2.5. if old_style_args is set to true then the