[SECURITY] [DSA 6527-1] rsync security update

🗓️ 28 Sep 2026 20:57:20Reported by DebianType

debian🔗 lists.debian.org👁 2 Views

rsync vulnerabilities in trixie allow local privilege escalation, info disclosure, and DoS.

Reporter	Title	Published	Views	Family All 872
attackerkb	CVE-2026-53786	13 Aug 202614:35	–	attackerkb
attackerkb	CVE-2026-53797	13 Aug 202614:40	–	attackerkb
attackerkb	CVE-2026-70459	13 Aug 202614:43	–	attackerkb
attackerkb	CVE-2026-53791	13 Aug 202614:38	–	attackerkb
attackerkb	CVE-2026-53783	13 Aug 202614:34	–	attackerkb
attackerkb	CVE-2026-53796	13 Aug 202614:39	–	attackerkb
attackerkb	CVE-2026-70462	13 Aug 202614:42	–	attackerkb
attackerkb	CVE-2026-53793	13 Aug 202614:38	–	attackerkb
attackerkb	CVE-2026-53798	13 Aug 202614:36	–	attackerkb
attackerkb	CVE-2026-70461	13 Aug 202614:42	–	attackerkb

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	13	amd64	rsync	3.5.0+ds1-0+deb13u1	rsync_3.5.0+ds1-0+deb13u1_amd64.deb
Debian	13	arm64	rsync	3.5.0+ds1-0+deb13u1	rsync_3.5.0+ds1-0+deb13u1_arm64.deb
Debian	13	armel	rsync	3.5.0+ds1-0+deb13u1	rsync_3.5.0+ds1-0+deb13u1_armel.deb
Debian	13	armhf	rsync	3.5.0+ds1-0+deb13u1	rsync_3.5.0+ds1-0+deb13u1_armhf.deb
Debian	13	i386	rsync	3.5.0+ds1-0+deb13u1	rsync_3.5.0+ds1-0+deb13u1_i386.deb
Debian	13	ppc64el	rsync	3.5.0+ds1-0+deb13u1	rsync_3.5.0+ds1-0+deb13u1_ppc64el.deb
Debian	13	riscv64	rsync	3.5.0+ds1-0+deb13u1	rsync_3.5.0+ds1-0+deb13u1_riscv64.deb
Debian	13	s390x	rsync	3.5.0+ds1-0+deb13u1	rsync_3.5.0+ds1-0+deb13u1_s390x.deb
Debian	13	amd64	rsync-dbgsym	3.5.0+ds1-0+deb13u1	rsync-dbgsym_3.5.0+ds1-0+deb13u1_amd64.deb
Debian	13	arm64	rsync-dbgsym	3.5.0+ds1-0+deb13u1	rsync-dbgsym_3.5.0+ds1-0+deb13u1_arm64.deb

28 Sep 2026 20:57Current

7.1High risk

Vulners AI Score7.1

CVSS 3.18.2 - 9.1

CVSS 49.2

EPSS0.00788

SSVC

rsync local privilege escalation information disclosure denial of service arbitrary code execution