Red Hat Security AdvisoryRHSA-2026:6390
rsync security update
Released 2026-04-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) rsync-daemon-3.2.5-3.el9_7.2, rsync-rrsync-3.2.5-3.el9_7.2
- Red Hat Enterprise Linux BaseOS (v. 9) rsync-3.2.5-3.el9_7.2
Fixes 1 record
Priority LOW 20
A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00349 · Published 2025-11-18 · Partial fix CWE-129
