Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | rsync-daemon | 0:3.2.5-7.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | rsync-rrsync | 0:3.2.5-7.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | rsync | 0:3.2.5-7.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | rsync-debuginfo | 0:3.2.5-7.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | rsync-debugsource | 0:3.2.5-7.el9_8 |
Vulnerabilities 2
-
High 7.4
In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a recei…
-
Medium 6.1
Rsync: rsync server leaks arbitrary client files
A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of …
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2330577
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2458898
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19368.json
-
report
https://access.redhat.com/security/cve/CVE-2024-12086
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-12086
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-12086
-
article
https://kb.cert.org/vuls/id/952657
-
report
https://access.redhat.com/security/cve/CVE-2026-41035
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-41035
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-41035
-
article
https://github.com/RsyncProject/rsync/issues/871
-
article
https://github.com/RsyncProject/rsync/releases
-
article
https://www.openwall.com/lists/oss-security/2026/04/16/2