Red Hat Security Advisory

RHSA-2025:2600

rsync security update

Released 2025-03-11 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) rsync-3.1.3-21.el8_10, rsync-daemon-3.1.3-21.el8_10

TI-2024-11212 CVE-2024-12088 · GHSA-ffph-g3pc-8r3g

HIGH 66

A flaw was found in rsync.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04646 Published 2025-01-14 Partial fix · 3.4.1-2.el10, 3.1.3-21.el8_10 +2 CWE-22

TI-2024-11211 CVE-2024-12087 · GHSA-9x68-7qq6-v523

HIGH 66

A path traversal vulnerability exists in rsync.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02259 Published 2025-01-14 Partial fix · 3.4.1-2.el10, 3.0.6-12.el6_10.2 +11 CWE-22

TI-2024-11819 CVE-2024-12747 · GHSA-gp7r-m4cc-qhwq

LOW 25

A flaw was found in rsync.

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.00385 Published 2025-01-14 Partial fix · 3.4.1-2.el10, 3.1.3-21.el8_10 +2 CWE-362