3775 matches found
Security update for rsync
This update for rsync fixes the following issues: CVE-2026-53783: rrsync restricted-directory escape validation-vs-exec race + unsafe option allowlist bsc1269041. CVE-2026-53784: Daemon module-root chdir escape under "use chroot = no" bsc1269042. CVE-2026-53785: --relative implied-parent creation...
SUSE-SU-2026:3657-1 Security update for rsync
This update for rsync fixes the following issues: - CVE-2026-53783: rrsync restricted-directory escape validation-vs-exec race + unsafe option allowlist bsc1269041. - CVE-2026-53784: Daemon module-root chdir escape under 'use chroot = no' bsc1269042. - CVE-2026-53785: --relative implied-parent...
CVE-2026-70461
A flaw was found in rsync. Remote unauthenticated attackers can exploit a heap out-of-bounds write vulnerability by supplying a crafted files-from entry. This entry, containing both an interior and trailing backslash, causes the addimpliedinclude function to under-count the trailing backslash whe...
CVE-2026-70455
A denial-of-service flaw in rsync allows remote attackers to exhaust system memory and CPU. By sending requests using the --zt Zstandard compression alias, an attacker can bypass security directives and spawn an excessive number of worker threads. Mitigation If the rsync daemon is unused,...
CVE-2026-70456
A flaw was found in rsync. A remote attacker could exploit an out-of-bounds write vulnerability in the readargs function by sending a specially crafted argument list. This could lead to corruption of adjacent memory, potentially causing a denial of service or, in some cases, arbitrary code...
CVE-2026-70453 affecting package rsync for versions less than 3.5.0-1
CVE-2026-70453 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
CVE-2026-53784 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53784 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
CVE-2026-70459 affecting package rsync for versions less than 3.5.0-1
CVE-2026-70459 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-70460 affecting package rsync for versions less than 3.5.0-1
CVE-2026-70460 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-53783 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53783 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
CVE-2026-53796 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53796 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
CVE-2026-53798 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53798 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
CVE-2026-70463 affecting package rsync for versions less than 3.5.0-1
CVE-2026-70463 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-70452 affecting package rsync for versions less than 3.5.0-1
CVE-2026-70452 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-53792 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53792 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
CVE-2026-70454 affecting package rsync for versions less than 3.5.0-1
CVE-2026-70454 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
CVE-2026-53789 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53789 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
CVE-2026-53790 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53790 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...