A disturbing report about problems with the Debian rsync security update

http://lwn.net/daily/

... But no details seen.

I'm a RedHatter - but the Debian types using rsync should exercise caution with this update.

Anyone on the list know exactly what the problem with it is? LWN is not a source prone to spreading FUD.

--James