As cited
Copy frozen at (site build).
vulnerabilities
Open-source file sync tool rsync 3.5.2 fixes a CPU exhaustion flaw
The rsync project released version 3.5.2, which patches a CPU exhaustion vulnerability that allowed connecting clients to exhaust server resources through intensive checksum calculations. The update also introduces a feature to deprioritize large transfers, preventing them from monopolizing system resources.
Why it matters: Operators of rsync servers and administrators deploying file sync infrastructure should apply this patch to prevent denial of service attacks from remote clients, and evaluate the new prioritization feature for production environments handling concurrent transfers.
- Source published
- First seen by Cybersecurity Tracker