Red Hat Security Advisory

RHSA-2025:0885

rsync security update

Released 2025-02-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v.8.4) rsync-3.1.3-12.el8_4.3, rsync-daemon-3.1.3-12.el8_4.3
Red Hat Enterprise Linux BaseOS E4S (v.8.4) rsync-3.1.3-12.el8_4.3, rsync-daemon-3.1.3-12.el8_4.3
Red Hat Enterprise Linux BaseOS TUS (v.8.4) rsync-3.1.3-12.el8_4.3, rsync-daemon-3.1.3-12.el8_4.3

TI-2024-11209 CVE-2024-12085 · GHSA-xh5q-pch5-g3xq

HIGH 72

A flaw was found in rsync which could be triggered when rsync compares file checksums.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08641 Published 2025-01-14 Fixed in 3.4.1-2.el10, 3.0.6-12.el6_10.1 +209 CWE-908