| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: rsync | Distribution: CentOS |
| Version: 3.2.7 | Vendor: CentOS |
| Release: 1.el9 | Build date: Mon Oct 26 16:43:28 2026 |
| Group: Unspecified | Build host: ppc64le-07.stream.rdu2.redhat.com |
| Size: 1133274 | Source RPM: rsync-3.2.7-1.el9.src.rpm |
| Packager: builder@centos.org | |
| Url: https://rsync.samba.org/ | |
| Summary: A program for synchronizing files over a network | |
Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable replacement for the rcp command. A technical report which describes the rsync algorithm is included in this package.
GPLv3+
* Mon Oct 26 2026 Michal Ruprich <mruprich@redhat.com> - 3.2.7-1 - Rebase rsync to version 3.2.7 in RHEL9 - Resolves: RHEL-245349 - Directory escape via TOCTOU race condition in rrsync (CVE-2026-53783) - Resolves: RHEL-247077 - Unauthorized File Access via Symlink Module Root (CVE-2026-53784) - Resolves: RHEL-244614 - Arbitrary file write via path traversal in --relative mode (CVE-2026-53785) - Resolves: RHEL-255150 - Arbitrary file deletion via malicious file list (CVE-2026-53789) - Resolves: RHEL-246100 - Command Injection via Multiple Code Paths (CVE-2026-53790) - Resolves: RHEL-246063 - Daemon IP Spoofing via PROXY Protocol Header (CVE-2026-53791) - Resolves: RHEL-246513 - Path Confinement Bypass in Chroot Mode (CVE-2026-53793) - Resolves: RHEL-246203 - DoS via --max-alloc=0 logic error (CVE-2026-53794) - Resolves: RHEL-246175 - Arbitrary file write via --temp-dir or --link-dest options (CVE-2026-53795) - Resolves: RHEL-255073 - Arbitrary File Read via Symlink Following (CVE-2026-53802) - Resolves: RHEL-244726 - Local Privilege Escalation via Symlink Following (CVE-2026-53803) - Resolves: RHEL-246149 - Access Control Bypass via DNS Resolution Failure (CVE-2026-70452) - Resolves: RHEL-244794 - DoS via Algorithmic Complexity (CVE-2026-70453) - Resolves: RHEL-247293 - TLS Cert Validation Bypass allows interception of encrypted sessions (CVE-2026-70454) - Resolves: RHEL-245207 - Heap Out-of-Bounds Write via crafted argument list (CVE-2026-70456) - Resolves: RHEL-255118 - Memory corruption via out-of-bounds write in size parsing (CVE-2026-70457) - Resolves: RHEL-246865 - Memory corruption via crafted file entries (CVE-2026-70458) - Resolves: RHEL-246843 - Path Traversal via --partial-dir/--backup-dir Symlink (CVE-2026-70460) - Resolves: RHEL-245324 - Information disclosure and denial of service via crafted files-from entry (CVE-2026-70461) - Resolves: RHEL-247133 - Authorization bypass via `auth users` directive parsing (CVE-2026-70463) - Resolves: RHEL-246963 - DoS via handshake stall (CVE-2026-70464) * Tue Jun 23 2026 Michal Ruprich <mruprich@redhat.com> - 3.2.5-9 - Fix integer overflow in compressed-token decoding (CVE-2026-43618) - Resolves: RHEL-174939 * Tue Jun 23 2026 Michal Ruprich <mruprich@redhat.com> - 3.2.5-8 - Fix TOCTOU symlink race in daemon no-chroot mode (CVE-2026-29518) - Resolves: RHEL-174953 * Mon May 11 2026 Michal Ruprich <mruprich@redhat.com> - 3.2.5-7 - Resolves: RHEL-173468 - CVE-2024-12086 rsync server leaks arbitrary client files * Mon May 04 2026 Michal Ruprich <mruprich@redhat.com> - 3.2.5-6 - Resolves: RHEL-169151 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling * Tue Apr 07 2026 Michal Ruprich <mruprich@redhat.com> - 3.2.5-5 - Resolves: RHEL-152536 - CVE-2025-10158 Out of bounds array access via negative index * Thu Oct 09 2025 Michal Ruprich <mruprich@redhat.com> - 3.2.5-4 - Resolves: RHEL-104404 - Do not clear DISPLAY unconditionally * Wed Feb 05 2025 Michal Ruprich <mruprich@redhat.com> - 3.2.5-3 - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 * Wed Jan 29 2025 Michal Ruprich <mruprich@redhat.com> - 3.2.5-2 - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70208 - Path traversal vulnerability in rsync - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links * Mon Dec 09 2024 Michal Ruprich <mruprich@redhat.com> - 3.2.3-21 - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps. - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure
/etc/rsyncd.conf /usr/bin/rsync /usr/bin/rsync-ssl /usr/lib/.build-id /usr/lib/.build-id/f1 /usr/lib/.build-id/f1/4df30c1eb3a6e4517f93a71c0c5a2182ec067d /usr/share/doc/rsync /usr/share/doc/rsync/support /usr/share/doc/rsync/support/Makefile /usr/share/doc/rsync/support/atomic-rsync /usr/share/doc/rsync/support/cvs2includes /usr/share/doc/rsync/support/deny-rsync /usr/share/doc/rsync/support/file-attr-restore /usr/share/doc/rsync/support/files-to-excludes /usr/share/doc/rsync/support/git-set-file-times /usr/share/doc/rsync/support/instant-rsyncd /usr/share/doc/rsync/support/json-rsync-version /usr/share/doc/rsync/support/logfilter /usr/share/doc/rsync/support/lsh /usr/share/doc/rsync/support/lsh.sh /usr/share/doc/rsync/support/mapfrom /usr/share/doc/rsync/support/mapto /usr/share/doc/rsync/support/mnt-excl /usr/share/doc/rsync/support/munge-symlinks /usr/share/doc/rsync/support/nameconvert /usr/share/doc/rsync/support/rrsync /usr/share/doc/rsync/support/rrsync.1.md /usr/share/doc/rsync/support/rsync-no-vanished /usr/share/doc/rsync/support/rsync-slash-strip /usr/share/doc/rsync/support/rsyncstats /usr/share/doc/rsync/support/savetransfer.c /usr/share/doc/rsync/tech_report.tex /usr/share/licenses/rsync /usr/share/licenses/rsync/COPYING /usr/share/man/man1/rsync-ssl.1.gz /usr/share/man/man1/rsync.1.gz /usr/share/man/man5/rsyncd.conf.5.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Nov 4 08:29:14 2026