mirror/rsync
1
0 Fork 0
mirror of https://github.com/RsyncProject/rsync.git synced 2026-10-20 21:04:15 -04:00
Code Issues Packages Projects Releases Wiki Activity

One more NEWS tweak.

Browse Source
This commit is contained in:
Wayne Davison committed 2004-08-12 21:02:13 +00:00
1 parent 8fb7db245a
commit d414962af4
1 file changed
+5 -4
Download Patch File Download Diff File Expand all files Collapse all files
NEWS
+5 -4
View File
@@ -5,10 +5,11 @@ Changes since 2.6.2:
SECURITY FIXES:
- A bug in the sanitize_path routine (which affects a non-chrooted
rsync daemon) could allow a user to specify an absolute path for
certain options (but not for file-transfer names). If you're running
a rsync daemon with chroot disabled, *please upgrade*, ESPECIALLY if
the user privs you run rsync under is anything above "nobody".
rsync daemon) could allow a user to craft a pathname that would get
transformed into an absolute path for certain options (but not for
file-transfer names). If you're running a rsync daemon with chroot
disabled, *please upgrade*, ESPECIALLY if the user privs you run
rsync under is anything above "nobody".
OUTPUT CHANGES (ATTN: those using a script to parse the verbose output):