$OpenBSD: SECURITY,v 1.5 2002/01/14 23:07:49 naddy Exp $

The server makes extensive use of strlcpy/strlcat/snprintf.

rsync upto 2.3.0 has a security hole. If rsync --version is less or equal
to that, you should upgrade.

rsync 2.3.1 has security holes in the rsyncd daemon when run with
chroot=no.   If you are using that feature, you should upgrade.
