rsync Bug Fix and Enhancement Update

rsync Updated 02 Oct 2025

Summary

10/05/2022
N/A
Yes i
Unrated
Not published

ALBA-2022:1992: rsync bug fix and enhancement update. Affects rsync versions < 3.1.3-14.el8. Fixed in 3.1.3-14.el8. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats
SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml
Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile
Javascript package-lock.json · yarn.lock · pnpm-lock.yaml
PHP composer.lock
Python poetry.lock · requirements.txt · Pipfile.lock
Go go.mod
Rust Cargo.lock
Ruby Gemfile.lock
Dart pubspec.lock
C/C++ conan.lock
Elixir mix.lock
Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Sponsored Devnack Penetration testing for web, API and mobile Manual testing by engineers who build software, not an auditor's checklist. Trusted by teams at Swift and Google Talk to Devnack

Background

rsync is a fast and versatile file synchronization tool that is widely used in the AlmaLinux ecosystem. It allows users to efficiently transfer and synchronize files between different systems. The rsync-daemon package provides the rsync server functionality. This vulnerability affects both the rsync and rsync-daemon packages in AlmaLinux 8.

Vulnerability Detail

This update addresses a bug and includes enhancements for the rsync and rsync-daemon packages. The bug fix resolves a vulnerability that could potentially be exploited by attackers. The specific details of the vulnerability are not provided in the vulnerability report. However, it is recommended to update to the fixed version (3.1.3-14.el8) to ensure the security and stability of the rsync and rsync-daemon packages.

How To Fix

Minimum fixed version

3.1.3-14.el8

This is the first release that contains the fix.

sudo dnf update rsync

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Conclusion

This vulnerability report addresses a bug fix and enhancement update for the rsync and rsync-daemon packages in AlmaLinux 8. It is recommended to update to the fixed version (3.1.3-14.el8) to ensure the security and stability of the packages. For further support on vulnerability remediation, please contact DevNack.com.

See every vulnerability recorded for rsync →

Share this vulnerability

FAQ

rsync is a file synchronization tool that allows efficient transfer and synchronization of files between different systems.

The impact of this vulnerability is not specified in the vulnerability report. However, it is recommended to update to the fixed version to ensure security and stability.

You can update the rsync and rsync-daemon packages by running the package manager command: sudo yum update rsync rsync-daemon

No workaround is mentioned in the vulnerability report. It is recommended to update to the fixed version.

More information about this vulnerability can be found in the AlmaLinux Release Notes linked in the References section of the vulnerability report.

Related vulnerabilities

Recent vulnerabilities recorded for rsync.

How To Fix

Minimum fixed version

3.1.3-14.el8

This is the first release that contains the fix.

sudo dnf update rsync

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →
Help improve this record
Report an issue or send feedback