Red Hat Security Advisory

RHSA-2022:2201

rsync security update

Released 2022-05-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) rsync-3.1.3-14.el8_6.2, rsync-daemon-3.1.3-14.el8_6.2

TI-2018-15259 CVE-2018-25032 · GHSA-jc36-42cf-vqwj

HIGH 72

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.51733 Published 2022-03-25 Fixed in 1.13.4 CWE-787