ROOT-OS-DEBIAN-11-CVE-2026-70452 CVE-2026-70452 in rsync - Patched by Root

Root has patched CVE-2026-70452 in the rsync package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-70452 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70452 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70452

creationtimestamp| type| source ---|---|--- 2026-08-13 17:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msy4lg6dki2f...

CVE-2026-70452

rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution failures during hostname-based access control evaluation. When a DNS lookup for a hostname-based deny rule fails, the daemon skips the ru...

CVE-2026-70452

rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability: DNS-resolution failures during hostname-based deny rule evaluation cause the daemon to skip the rule instead of denying, enabling unauthorized access to restricted module file trees by attackers who can trigger DNS failures...