CLSA-2026-1776769741 rsync: Fix of 3 CVEs

🗓️ 21 Apr 2026 11:09:06Reported by GoogleType

osv🔗 osv.dev👁 6 Views

Rsync fixes CVEs: enforce trailing NUL in receive_xattr; sanitize xname; prevent protect_args reset.

Reporter	Title	Published	Views	Family All 189
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.5 fixes multiple security vulnerabilities	26 Mar 202503:58	–	ibm
FreeBSD	rsync -- multiple vulnerabilities	17 Dec 201700:00	–	freebsd
ATTACKERKB	CVE-2017-17434	6 Dec 201703:29	–	attackerkb
AlpineLinux	CVE-2017-16548	6 Nov 201705:00	–	alpinelinux
AlpineLinux	CVE-2017-17434	6 Dec 201703:00	–	alpinelinux
AlpineLinux	CVE-2018-5764	17 Jan 201822:00	–	alpinelinux
ArchLinux	[ASA-201801-21] rsync: multiple issues	29 Jan 201800:00	–	archlinux
BDU FSTEC	The vulnerability of the `parse_arguments` function in the rsyncd server’s Rsync utility allows users to compromise data integrity.	18 Dec 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the recv_files and read_ndx_and attrs functions in the rsync daemon allows a hacker to circumvent existing access restrictions and compromise the confidentiality, integrity, and accessibility of the protected information.	17 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the receive_xattr function of the xattrs.c utility for file transfer and synchronization in Rsync, related to reading beyond the buffer data limit, allows an attacker to access confidential data, compromise its integrity, and cause service failures.	21 Mar 202100:00	–	bdu_fstec