From 7f79682732788d255b7809beff8a8f826690c58f Mon Sep 17 00:00:00 2001 From: Andrew Tridgell Date: Wed, 15 Jan 2025 05:41:07 +1100 Subject: [PATCH] NEWS: update protocol version table --- NEWS.md | 19 ++++++++++++------- 1 file changed, 12 insertions(+), 7 deletions(-) diff --git a/NEWS.md b/NEWS.md index b983097a..4f18bc76 100644 --- a/NEWS.md +++ b/NEWS.md @@ -1,19 +1,24 @@ -# NEWS for rsync 3.4.0 (14th Jan 2025) +# NEWS for rsync 3.4.0 (15 Jan 2025) Release 3.4.0 is a security release that fixes a number of important vulnerabilities. -Many thanks to Simon Scannell, Pedro Gallegos, and Jasiel Spelman at -Google Cloud Vulnerability Research and Aleksei Gorban (Loqpa) for -discovering these vulnerabilities and working with the rsync project -to develop and test fixes. - For more details on the vulnerabilities please see the CERT report https://kb.cert.org/vuls/id/952657 ## Changes in this version: +### PROTOCOL NUMBER: + + - The protocol number was changed to 32 to make it easier for + administrators to check their servers have been updated + ### SECURITY FIXES: +Many thanks to Simon Scannell, Pedro Gallegos, and Jasiel Spelman at +Google Cloud Vulnerability Research and Aleksei Gorban (Loqpa) for +discovering these vulnerabilities and working with the rsync project +to develop and test fixes. + - CVE-2024-12084 - Heap Buffer Overflow in Checksum Parsing. - CVE-2024-12085 - Info Leak via uninitialized Stack contents defeats ASLR. @@ -4811,7 +4816,7 @@ https://kb.cert.org/vuls/id/952657 | RELEASE DATE | VER. | DATE OF COMMIT\* | PROTOCOL | |--------------|--------|------------------|-------------| -| ?? Nov 2024 | 3.3.1 | | 31 | +| 15 Jan 2025 | 3.4.0 | | 32 | | 06 Apr 2024 | 3.3.0 | | 31 | | 20 Oct 2022 | 3.2.7 | | 31 | | 09 Sep 2022 | 3.2.6 | | 31 | -- 2.47.3