Read the docs
Red Hat Security Advisory

RHSA-2026:6436

rsync security update

Released 2026-04-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 20

A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00349 Published 2025-11-18 Partial fix CWE-129