rsync 3.5.0 released
Version 3.5.0 of rsync has been released with a huge number of security fixes : This release fixes 33 security issues found during a focused audit of rsync's path handling and daemon protocol, a companion daemon-protocol fuzzing pass, and reports from external researchers -- plus several robustness hardenings. CVE IDs were assigned by VulnCheck (CNA); the precise "introduced in" version ranges…
We haven't written up this one. LWN has the full story — the link below goes straight to it.