From 155b6d6c1219ab2224c20c58d423a3f1b850395f Mon Sep 17 00:00:00 2001
From: Burnett01 <s-8@outlook.com>
Date: Fri, 4 Sep 2026 19:46:02 +0200
Subject: [PATCH] Release/9.0.1 (#107)

* feat: upgrade rsync to 3.5.0-r0

Rsync released version 3.5.0 with a ton of CVE fixes.

https://download.samba.org/pub/rsync/NEWS#3.5.0

- CVE-2026-53802 (HIGH)
- CVE-2026-53803 (HIGH)
- CVE-2026-53785 (HIGH)
- CVE-2026-53784 (HIGH)
- CVE-2026-53793 (HIGH)
- CVE-2026-53795 (HIGH)
- CVE-2026-53796 (MEDIUM)
- CVE-2026-53797 (MEDIUM)
- CVE-2026-53799 (MEDIUM)
- CVE-2026-53800 (MEDIUM)
- CVE-2026-53801 (MEDIUM)
- CVE-2026-53783 (HIGH)
- CVE-2026-53786 (MEDIUM)
- CVE-2026-53798 (MEDIUM)
- CVE-2026-53788 (MEDIUM)
- CVE-2026-53789 (MEDIUM)
- CVE-2026-53791 (CRITICAL)
- CVE-2026-53790 (HIGH)
- CVE-2026-53792 (MEDIUM)
- CVE-2026-53794 (MEDIUM)
- CVE-2026-70461 (HIGH)
- CVE-2026-70458 (HIGH)
- CVE-2026-70456 (HIGH)
- CVE-2026-70457 (MEDIUM)
- CVE-2026-70459 (MEDIUM)
- CVE-2026-70464 (HIGH)
- CVE-2026-70455 (HIGH)
- CVE-2026-70453 (HIGH)
- CVE-2026-70452 (HIGH)
- CVE-2026-70463 (HIGH)
- CVE-2026-70460 (HIGH)
- CVE-2026-70462 (MEDIUM)
- CVE-2026-70454 (MEDIUM

* chore: update supported version from 9.0.0 to 9.0.1

* chore: Update README with new rsync and version information
---
 Dockerfile  |  2 +-
 README.md   | 12 +++++++++---
 SECURITY.md |  3 ++-
 3 files changed, 12 insertions(+), 5 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 2b34214..b8a0359 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 FROM alpine:3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b AS base
 
-RUN apk update && apk add --no-cache --upgrade rsync openssh openssl busybox
+RUN apk update && apk add --no-cache --upgrade 'rsync>=3.5.0-r0' openssh openssl busybox
 
 RUN rm -rf /var/cache/apk/*
 
diff --git a/README.md b/README.md
index aafc1a8..05589fa 100644
--- a/README.md
+++ b/README.md
@@ -13,16 +13,16 @@ Use this action in a CD workflow which leaves deployable code in `GITHUB_WORKSPA
 The base-image of this action is very small and based on **Alpine 3.24.1** (no cache) which results in fast deployments.
 
 Alpine version: [3.24.1](https://www.alpinelinux.org/posts/Alpine-3.24.1-released.html)
-Rsync version: [3.4.3-r1](https://download.samba.org/pub/rsync/NEWS#3.4.3)
+Rsync version: [3.5.0-r0](https://download.samba.org/pub/rsync/NEWS#3.5.0)
 
-## Current Version: v9 (9.0.0)
+## Current Version: v9 (9.0.1)
 
 ### Release channels:
 
 | Version | Purpose          | Immutable  | 
 | ------- | ------------------ | ------------------ | 
 | ``v9`` (recommended, LTS)  |  latest MAJOR (pointer to 9.MINOR.PATCH) | no |
-| 9.0.0  | latest MAJOR+MINOR+PATCH | yes |
+| 9.0.1  | latest MAJOR+MINOR+PATCH | yes |
 | ``v8`` (ESU)  | previous MAJOR (pointer to 8.MINOR.PATCH) | no |
 | 8.0.5  | previous MAJOR+MINOR+PATCH | yes |
 
@@ -285,6 +285,12 @@ sudo apk add rsync
 
 ## Versions
 
+## Version 9.0.0
+
+Check here: 
+
+- https://github.com/Burnett01/rsync-deployments/tree/9.0.0  (alpine 3.24.1)
+
 ## Version 8.0.5
 
 Check here: 
diff --git a/SECURITY.md b/SECURITY.md
index 5ececbc..777674b 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -8,7 +8,8 @@ The following versions are currently being supported with security updates:
 
 | Version | Supported          | Rsync version          | Alpine version          | Support Until  |
 | ------- | ------------------ | ------------------ | ------------------ | ------------------ | 
-| (``v9``) 9.0.0  | :white_check_mark: | >= 3.4.3-r1 | 3.24.1 | LTS (2028-*) |
+| (``v9``) 9.0.1  | :white_check_mark: | >= 3.5.0-r0 | 3.24.1 | LTS (2028-*) |
+| 9.0.0  | :white_check_mark: | >= 3.4.3-r1 | 3.24.1 | LTS (2028-*) |
 | (``v8``) 8.0.5  | :white_check_mark: | >= 3.4.1-r1 | 3.23.4 | ESU (Apr, 1st 2027) |
 | 8.0.4  | :white_check_mark: | >= 3.4.1-r1 | 3.23.3 | Dec, 6th 2026 |
 | 8.0.3  | :white_check_mark: | >= 3.4.1-r1 | 3.23.2 | Dec, 6th 2026 |