UBUNTU-CVE-2026-87799

Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write...

CVE-2026-87799

Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write...

PT-2026-99895

Name of the Vulnerable Software and Affected Versions Canonical LXD versions 4.0 through 4.0.13 Canonical LXD versions 5.0 through 5.0.9 Canonical LXD versions 5.21 through 5.21.7 Canonical LXD versions 6.0 through 6.9 Description Improper link resolution in the migration receive path allows an...

Important: rsync

Issue Overview: rsync before 3.5.0 contains an algorithmic complexity vulnerability in the hashsearch function that allows a remote attacker to cause a denial of service by delivering a carefully constructed file list. A sender can exploit the quadratic-time worst-case behavior in hash lookups to...

OESA-2026-4072 rsync security update

Rsync is an open source utility that provides fast incremental file transfer. It uses the "rsync algorithm" which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files a...

CLSA-2026-1790173668 rsync: Fix of 6 CVEs

CVE-2026-53790: command injection in the daemon pre-/post-xfer exec hooks and RSYNCCONNECTPROG - CVE-2026-70453: denial of service in hashsearch -- unbounded chain walk - CVE-2026-70456: out-of-bounds write in readargs -- no slot reserved for the trailing NULL - CVE-2026-70458: out-of-bounds read...

OPENSUSE-SU-2026:11869-1 rsync-3.5.1-1.1 on GA media

These are all security issues fixed in the rsync-3.5.1-1.1 package on the GA media of openSUSE Tumbleweed...

CLSA-2026-1789749013 rsync: Fix of 6 CVEs

CVE-2026-53793: confine the alt-dest basis stat in trydests and hardlinkcheck - CVE-2026-70458: skip the FSUM read for ITEMDELETED in logformatted...

OESA-2026-3950 rsync security update

Rsync is an open source utility that provides fast incremental file transfer. It uses the "rsync algorithm" which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files a...

OESA-2026-3949 rsync security update

Rsync is an open source utility that provides fast incremental file transfer. It uses the "rsync algorithm" which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files a...

CLSA-2026-1789745909 Fix CVE(s): CVE-2026-53785

SECURITY UPDATE: Destination-tree escape via symlink following in --relative implied-parent handling - debian/patches/CVE-2026-53785.patch: resolve the receiver's destination names one component at a time with ONOFOLLOW|ODIRECTORY, acting against a directory fd that is held open, instead of handi...

CLSA-2026-1789737420 rsync: Fix of 6 CVEs

CVE-2026-53793: confine the alt-dest basis stat in trydests and hardlinkcheck - CVE-2026-70458: skip the FSUM read for ITEMDELETED in logformatted...

EulerOS Virtualization 2.11.1 : rsync (EulerOS-SA-2026-3470)

According to the versions of the rsync packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in rsync. When using the --safe-links option, the rsync client fails to properly verify if a symbolic link...

EulerOS Virtualization 2.12.1 : rsync (EulerOS-SA-2026-3617)

According to the versions of the rsync package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list...

EulerOS Virtualization 2.12.0 : rsync (EulerOS-SA-2026-3671)

According to the versions of the rsync package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list...

EulerOS Virtualization 2.11.0 : rsync (EulerOS-SA-2026-3557)

According to the versions of the rsync package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in rsync. When using the --safe-links option, the rsync client fails to properly verify if a symbolic link destinati...

Rsync Arbitrary Command Execution

The vulnerability of the Rsync file transfer and synchronization utility is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Rsync Authentication Bypass

The vulnerability of the Rsync file transfer and synchronization utility relates to the bypassing of authentication processes through spoofing. Exploiting this vulnerability allows a malicious actor to circumvent existing security mechanisms remotely...

Rsync Symbolic Link

The vulnerability of the Rsync file transfer and synchronization utility is related to the improper handling of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to increase their privileges...

Rsync Symbolic Link

The vulnerability of the Rsync file transfer and synchronization utility is related to the incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions remotely...