USN-5921-1: rsync vulnerabilities
Koen van Hove discovered that the rsync client incorrectly validated
filenames returned by servers. If a user or automated system were tricked
into connecting to a malicious server, a remote attacker could use this
issue to write arbitrary files, and possibly excalate privileges.
Source: USN-5921-1: rsync vulnerabilities