MGASA-2026-0048 Updated rsync packages fix security vulnerability

Out of bounds array access via negative index. CVE-2025-10158...

Updated rsync packages fix security vulnerability

Out of bounds array access via negative index. CVE-2025-10158...

Fedora 42 : rsync (2026-de8c9d7b6f)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-de8c9d7b6f advisory. Updating tests ---- Fix for CVE-2025-10158 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Fedora: Security Advisory (FEDORA-2026-de8c9d7b6f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Medium: rsync

Issue Overview: A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue. CVE-2025-101...

Amazon Linux 2 : rsync, --advisory ALAS2-2026-3157 (ALAS-2026-3157)

The version of rsync installed on the remote host is prior to 3.1.2-11. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3157 advisory. A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2025-10158)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-10158 advisory. - A malicious client acting as the receiver of an rsync file transfer can trigger an out of boun...

CBL Mariner 2.0 Security Update: CBL-Mariner Releases (CVE-2025-10158)

The version of CBL-Mariner Releases installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-10158 advisory. - A malicious client acting as the receiver of an rsync file transfer can trigger an out of boun...

SUSE-SU-2026:0069-1 Security update for rsync

This update for rsync fixes the following issues: - CVE-2025-10158: Fixed out of bounds array access via negative index bsc1254441...

Security update for rsync

This update for rsync fixes the following issues: CVE-2025-10158: Fixed out of bounds array access via negative index bsc1254441 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

SUSE-SU-2026:0041-1 Security update for rsync

This update for rsync fixes the following issues: - CVE-2025-10158: Fixed out of bounds array access via negative index bsc1254441...

SUSE-SU-2026:0005-1 Security update for rsync

This update for rsync fixes the following issues: - CVE-2025-10158: Fixed out of bounds array access via negative index bsc1254441...

SUSE-SU-2026:20058-1 Security update for rsync

This update for rsync fixes the following issues: - CVE-2025-10158: Fixed out of bounds array access via negative index bsc1254441...

CVE-2025-10158

creationtimestamp| type| source ---|---|--- 2025-12-24 16:00:10+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3maqn2i4qv22k 2025-12-24 16:45:23+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3maqpledc6c2k 2026-03-19 00:00:00+00:00| seen|...

Security update for rsync

This update for rsync fixes the following issues: CVE-2025-10158: Fixed out-of-bounds array access via negative index bsc1254441 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

SUSE-SU-2025:4511-1 Security update for rsync

This update for rsync fixes the following issues: - CVE-2025-10158: Fixed out-of-bounds array access via negative index bsc1254441...

rsync-3.4.1-4.1 on GA media (moderate)

rsync-3.4.1-4.1 on GA media Announcement ID: openSUSE-SU-2025:15827-1 Rating: moderate Cross-References: CVE-2025-10158 CVSS scores: CVE-2025-10158 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

Amazon Linux 2023 : rsync, rsync-daemon (ALAS2023-2025-1302)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1302 advisory. A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least re...

Medium: rsync

Issue Overview: A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue. CVE-2025-101...

CVE-2025-10158

A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue...