Red Hat Security Advisory

RHSA-2025:23854

rsync security update

Released 2025-12-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v.8.6) rsync-3.1.3-14.el8_6.9, rsync-daemon-3.1.3-14.el8_6.9
Red Hat Enterprise Linux BaseOS E4S (v.8.6) rsync-3.1.3-14.el8_6.9, rsync-daemon-3.1.3-14.el8_6.9
Red Hat Enterprise Linux BaseOS TUS (v.8.6) rsync-3.1.3-14.el8_6.9, rsync-daemon-3.1.3-14.el8_6.9

TI-2024-11211 CVE-2024-12087 · GHSA-9x68-7qq6-v523

HIGH 66

A path traversal vulnerability exists in rsync.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02259 Published 2025-01-14 Partial fix · 3.4.1-2.el10, 3.0.6-12.el6_10.2 +11 CWE-22