This is the mail archive of the
cygwin-apps
mailing list for the Cygwin project.
Re: [UPLOAD] rsync-2.6.9-2
Lapo Luchini wrote:
>> Would it make sense to include the patch [...] to fix the off-by-one
>> errors that could lead remote code execution?[*]
>> I'm sorry for not noticing this before rsync was uploaded.
>>
> Don't be sorry, *I* am sorry not to have noticed that myself, as I was
> supposed to ;)
>
I have to notice, though, that I'm in good company: neither official
rsync homepage or devel ML took notice of it so far...
(I wonder why the patch author didn't write to the ML concurrently to
his blog post)
Anyway...
http://cyberx.lapo.it/cygwin/rsync/setup.hint (unchanged)
http://cyberx.lapo.it/cygwin/rsync/rsync-2.6.9-2.tar.bz2
http://cyberx.lapo.it/cygwin/rsync/rsync-2.6.9-2-src.tar.bz2
--
Lapo Luchini
lapo@lapo.it (OpenPGP & X.509)
www.lapo.it (Jabber, ICQ, MSN)