| Package | Affected versions | Patched versions |
|---|---|---|
| rsync | < 2.5.3 | 2.5.3 |
rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free