Red Hat Security AdvisoryRHSA-2026:25170
rsync security update
Released 2026-06-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) rsync-3.1.3-12.el8_4.7, rsync-daemon-3.1.3-12.el8_4.7
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) rsync-3.1.3-12.el8_4.7, rsync-daemon-3.1.3-12.el8_4.7
Fixes 1 record
Priority LOW 34
In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00393 · Published 2026-04-16 · Fixed CWE-130
