TI-2024-11210 CVE-2024-12086 · GHSA-82c6-8mfc-c23h
Rsync: rsync server leaks arbitrary client files
Priority MEDIUM 63
A flaw was found in rsync.
RHSA-2026:20603
rsync security update
Released 2026-05-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.9.6) rsync-daemon-3.2.5-3.el9_6.1
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) rsync-3.2.5-3.el9_6.1
Fixes 3 records
TI-2026-29674 CVE-2026-41035 · GHSA-m34r-4v3r-pp9v
In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a…
Priority LOW 34
In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free.
TI-2025-09325 CVE-2025-10158 · GHSA-3rvc-qcwh-fhqv
Rsync: Out of bounds array access via negative index
Priority LOW 20
A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index.