It was discovered that lsyncd, a daemon to synchronize local directories
using rsync, performed insufficient sanitising of filenames which might
result in the execution of arbitrary commands.