Most recent entries from all

ALSA-2026:19368 — Important: rsync security update

Affected: AlmaLinux:9: rsync, AlmaLinux:9: rsync-daemon, AlmaLinux:9: rsync-rrsync

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.

Security Fix(es):

* rsync: rsync server leaks arbitrary client files (CVE-2024-12086) * rsync: Rsync: Use-after-free vulnerability in extended attribute handling (CVE-2026-41035)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-00374

BELL-CVE-2024-12086

Affected: Alpaquita:23: rsync, Alpaquita:stream: rsync

certfr-2025-avi-0067 — De multiples vulnérabilités ont été découvertes dans Qnap HBS 3 Hybrid Backup Sync. Elles permettent à un attaquant de…

certfr-2025-avi-0067

EUVD-2026-357275

fkie_cve-2024-12086

A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare with in order to determine what data needs to be sent to the server. By sending specially constructed checksum values for arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the responses from the client.

GHSA-82c6-8mfc-c23h

msrc_CVE-2024-12086 — Rsync: rsync server leaks arbitrary client files

msrc_CVE-2024-12086

OESA-2025-1060 — rsync security update

Affected: openEuler:22.03-LTS-SP4: rsync

Rsync is an open source utility that provides fast incremental file transfer. It uses the "rsync algorithm" which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files are present at one of the ends of the link beforehand. Security Fix(es): (CVE-2024-12085) (CVE-2024-12086) (CVE-2024-12087) (CVE-2024-12088) (CVE-2024-12747)

openSUSE-SU-2025:14665-1 — rsync-3.4.1-1.1 on GA media

rsync-3.4.1-1.1 on GA media

RHSA-2026:20603 — Red Hat Security Advisory: rsync security update

rsync: rsync server leaks arbitrary client files rsync: Rsync: Out of bounds array access via negative index rsync: Rsync: Use-after-free vulnerability in extended attribute handling

SUSE-SU-2025:0156-1 — Security update for rsync

Security update for rsync

UBUNTU-CVE-2024-12086

Affected: Ubuntu:Pro:14.04:LTS: rsync, Ubuntu:Pro:16.04:LTS: rsync, Ubuntu:Pro:18.04:LTS: rsync, Ubuntu:20.04:LTS: rsync, Ubuntu:22.04:LTS: rsync, Ubuntu:24.04:LTS: rsync

VDE-2025-053 — Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware

Coreutils: heap overflow in split --line-bytes with very long lines Unprivileged overlay + shiftfs read access Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file SSL_select_next_proto buffer overread Remote Code Execution in pypa/setuptools

WID-SEC-W-2025-0084 — Rsync: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Rsync ausnutzen, um vertrauliche Informationen preiszugeben, sich erhöhte Rechte zu verschaffen und Daten zu manipulieren.