CVE-2026-70459 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70459 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70456 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70456 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70462 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70462 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53783 affecting package rsync for versions less than 3.5.0-1

CVE-2026-53783 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...

CVE-2026-53792 affecting package rsync for versions less than 3.5.0-1

CVE-2026-53792 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...

CVE-2026-53795 affecting package rsync for versions less than 3.5.0-1

CVE-2026-53795 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...

CVE-2026-53799 affecting package rsync for versions less than 3.5.0-1

CVE-2026-53799 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...

CVE-2026-70460 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70460 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53788 affecting package rsync for versions less than 3.5.0-1

CVE-2026-53788 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...

CVE-2026-53800 affecting package rsync for versions less than 3.5.0-1

CVE-2026-53800 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...

CVE-2026-70454 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70454 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...

CVE-2026-53803 affecting package rsync for versions less than 3.5.0-1

CVE-2026-53803 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...

CVE-2026-53793 affecting package rsync for versions less than 3.5.0-1

CVE-2026-53793 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...

CVE-2026-70463 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70463 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70452 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70452 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53792

A flaw was found in rsync. A malicious receiver can exploit an out-of-bounds read vulnerability in the sender-side block matching logic. By sending a specially crafted checksum block with a length of zero, an attacker can trigger memory access before the start of an allocated buffer. This can lea...

CVE-2026-70453

A flaw was found in rsync. A remote attacker can exploit an algorithmic complexity vulnerability within the hashsearch function by sending a specially crafted file list. This can lead to the exhaustion of the receiver's CPU resources, causing a sustained denial of service DoS. Mitigation Disable...

CVE-2026-53803

A symlink-following vulnerability in rsync allows local attackers to redirect predictable output paths to arbitrary filesystem locations. When rsync runs with elevated privileges such as setuid or a privileged daemon, this enables arbitrary file overwrites and local privilege escalation. Mitigati...

CVE-2026-47187 SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write

SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local...

CVE-2026-47187

SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local...