rsync-3.1.2-11.el7

The rsync utility enables the users to copy and synchronize files locally or
across a network. Synchronization with rsync is fast because rsync only sends
the differences in files over the network instead of sending whole files. The
rsync utility is also used as a mirroring tool.

Security Fix(es):

* rsync: remote arbitrary files write inside the directories of connecting
peers (CVE-2022-29154)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE-2022-29154
An issue was discovered in rsync before 3.2.5 that allows malicious remote
servers to write arbitrary files inside the directories of connecting peers. The
server chooses which files/directories are sent to the client. However, the
rsync client performs insufficient validation of file names. A malicious rsync
server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the
rsync client target directory and subdirectories (for example, overwrite the
.ssh/authorized_keys file).