corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a087a5-59f0-72af-ab2b-da03121edb97

How my minimal, memory-safe Go rsync steers clear of vulnerabilities

Michael Stapelbergs Website: posts tagged debian · published 24 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at michael.stapelberg.ch Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
64
Words captured
8,157

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.openwall.com/lists/oss-security/2025/01/14/3
openwall.com
https://github.com/gokrazy/rsync
github.com
https://github.com/RsyncProject/rsync
github.com
https://distr1.org/
distr1.org
https://router7.org/
router7.org
https://gokrazy.org/
gokrazy.org
https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj
github.com
https://nullx3d.com/
nullx3d.com
https://github.com/RsyncProject/rsync/security/advisories
github.com
https://en.wikipedia.org/wiki/MD4
en.wikipedia.org
https://en.wikipedia.org/wiki/MD5
en.wikipedia.org
https://github.com/RsyncProject/rsync/commit/ae16850dc58e884eb9f5cb7f772342b2db28f471
github.com
https://github.com/RsyncProject/rsync/blob/9615a2492bbf96bc145e738ebff55bbb91e0bbee/sender.c
github.com
https://github.com/RsyncProject/rsync/blob/9615a2492bbf96bc145e738ebff55bbb91e0bbee/rsync.h
github.com
https://github.com/RsyncProject/rsync/blob/9615a2492bbf96bc145e738ebff55bbb91e0bbee/io.c
github.com
https://github.com/RsyncProject/rsync/blob/9615a2492bbf96bc145e738ebff55bbb91e0bbee/lib/md-defines.h
github.com
https://github.com/RsyncProject/rsync/commit/0902b52f6687b1f7952422080d50b93108742e53
github.com
https://github.com/gokrazy/rsync/blob/3a9d1ec136e049b2bffc9db15230eb70308ac90d/rsyncd/sender.go
github.com
https://github.com/gokrazy/rsync/commit/178216f10f2e05fd74bf865f2d0725fce4f907cd
github.com
https://github.com/RsyncProject/rsync/blob/9615a2492bbf96bc145e738ebff55bbb91e0bbee/match.c
github.com
https://github.com/RsyncProject/rsync/commit/589b0691e59f761ccb05ddb8e1124991440db2c7
github.com
https://github.com/RsyncProject/rsync/commit/688f5c379a433038bde36897a156d589be373a98
github.com
https://github.com/RsyncProject/rsync/commit/407c71c7ce562137230e8ba19149c81ccc47c387
github.com
https://github.com/RsyncProject/rsync/blob/9615a2492bbf96bc145e738ebff55bbb91e0bbee/rsync.c
github.com
https://github.com/RsyncProject/rsync/blob/9615a2492bbf96bc145e738ebff55bbb91e0bbee/receiver.c
github.com
https://github.com/RsyncProject/rsync/commit/c35e28331f10ba6eba370611abd78bde32d54da7
github.com
https://access.redhat.com/security/cve/CVE-2024-12747
access.redhat.com
https://github.com/RsyncProject/rsync/commit/0590b09d9a34ae72741b91ec0708a820650198b0
github.com
https://manpages.debian.org/readlink.2
manpages.debian.org
https://github.com/gokrazy/rsync/commit/1b1fbf65b8ed696db464bf53445e8f9b97a37210
github.com
https://github.com/RsyncProject/rsync/pull/895/changes/8471fdd1561049ef5f58df44a1811a50bd9a531d
github.com
https://github.com/RsyncProject/rsync/commit/859d44fa4f1420775e4ba050337ef32092f2894c
github.com
https://github.com/gokrazy/rsync/commit/b6d50e5e9fd1fdf196f09947a6bc796b1ac48f46
github.com
https://github.com/gokrazy/rsync/commit/cc42e03cad132ba19e0905f149c7c34dab45cd3a
github.com
https://github.com/RsyncProject/rsync/security/advisories/GHSA-g37v-g3gj-pmwq
github.com
https://github.com/RsyncProject/rsync/commit/c44c90e9460c666c965446a8c0957f0b9fa4c66a
github.com
https://github.com/gokrazy/rsync/issues/35
github.com
https://github.com/RsyncProject/rsync/security/advisories/GHSA-28pw-r563-rxvm
github.com
https://github.com/RsyncProject/rsync/commit/0cf200ecbb8baaf58070d825c4fbd892b4a63b69
github.com
https://github.com/RsyncProject/rsync/security/advisories/GHSA-4h9m-w5ff-j735
github.com
https://github.com/RsyncProject/rsync/commit/30656c5e358b1c6033f4caf24f3e11b29d25c9f4
github.com
https://github.com/RsyncProject/rsync/security/advisories/GHSA-rjfm-3w2m-jf4f
github.com
https://github.com/RsyncProject/rsync/commit/c38f20c5ffabacd0c0c483786ab224a36e14bf43
github.com
https://github.com/RsyncProject/rsync/security/advisories/GHSA-8f85-j2cv-59m8
github.com
https://github.com/RsyncProject/rsync/commit/a5fc5ebe7a8ef1aa72f6e344599f97fd4427ecba
github.com
https://michael.stapelberg.ch/posts/2026-05-24-minimal-memory-safe-go-rsync-vulns/rsync-combinations.png
michael.stapelberg.ch
https://man.openbsd.org/unveil.2
man.openbsd.org
https://man.openbsd.org/pledge.2
man.openbsd.org
https://github.com/kristapsdz/openrsync/commit/8f1927c35021cd1fbf31cb8c5a6393cc37ba4de8
github.com
https://github.com/gokrazy/rsync/commit/d63aaed3be4f69ac98581c4b0ac2646c37f1f8c0
github.com
https://github.com/gokrazy/rsync/commit/da9802e33c89af947d4958ec31e51b14f43ebfb2
github.com
Dynamic Users with systemd Read at the source ↗
0pointer.net
https://justine.lol/pledge/
justine.lol
https://docs.kernel.org/userspace-api/landlock.html
docs.kernel.org
https://man.openbsd.org/unveil
man.openbsd.org
https://github.com/gokrazy/rsync/commit/f84d1e39ec6613599cd9610974e89be5ca183a6d
github.com
https://pkg.go.dev/os
pkg.go.dev
https://go.dev/blog/osroot
go.dev
https://manpages.debian.org/mknod.2
manpages.debian.org
https://github.com/gokrazy/rsync/blob/45444634288e753178af56c61e064ffb08636695/internal/receiver/generatormknod_linux.go
github.com
https://manpages.debian.org/mknodat.2
manpages.debian.org
https://manpages.debian.org/bind.2
manpages.debian.org
https://mastodon.social/@pid_eins/115869484548013992
mastodon.social
https://pkg.go.dev/golang.org/x/sys/unix
pkg.go.dev