{"id":"RLSA-2026:67463","summary":"Important: rsync security, bug fix, and enhancement update","details":"The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.\n\nSecurity Fix(es):\n\n* rsync: rsync 2.3.3 \u003c 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink (CVE-2026-70460)\n\n* rsync: rsync: TLS Certificate Validation Bypass allows interception of encrypted sessions (CVE-2026-70454)\n\n* rsync: rsync: Arbitrary file deletion via malicious file list (CVE-2026-53789)\n\n* rsync: rsync \u003c 3.5.0 Command Injection via Multiple Code Paths (CVE-2026-53790)\n\n* rsync: rsync: Memory corruption via crafted file entries (CVE-2026-70458)\n\n* rsync: rsync: Denial of Service via handshake stall (CVE-2026-70464)\n\n* rsync: rsync: Local Privilege Escalation via Symlink Following (CVE-2026-53803)\n\n* rsync: rsync: Unauthorized File Access via Symlink Module Root (CVE-2026-53784)\n\n* rsync: rsync: Authorization bypass via `auth users` directive parsing (CVE-2026-70463)\n\n* rsync: rsync 3.1.0 \u003c 3.5.0 Access Control Bypass via DNS Resolution Failure (CVE-2026-70452)\n\n* rsync: rsync \u003c 3.5.0 Daemon IP Spoofing via PROXY Protocol Header (CVE-2026-53791)\n\n* rsync: rsync: Arbitrary file write via --temp-dir or --link-dest options (CVE-2026-53795)\n\n* rsync: rsync: Heap Out-of-Bounds Write via crafted argument list (CVE-2026-70456)\n\n* rsync: rsync \u003c 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode (CVE-2026-53793)\n\n* rsync: rsync: Denial of Service via Algorithmic Complexity (CVE-2026-70453)\n\n* rsync: rsync: Denial of Service via Zstandard compression thread exhaustion (CVE-2026-70455)\n\n* rsync: rsync: Memory corruption via out-of-bounds write in size parsing (CVE-2026-70457)\n\n* rsync: rsync: Information disclosure and denial of service via crafted files-from entry (CVE-2026-70461)\n\n* rsync: rsync: Arbitrary File Read via Symlink Following (CVE-2026-53802)\n\n* rsync: rsync: Arbitrary file write via path traversal in --relative mode (CVE-2026-53785)\n\n* rsync: rsync: Directory escape via TOCTOU race condition in rrsync (CVE-2026-53783)\n\nBug Fix(es) and Enhancement(s):\n\n* Rebase rsync to version 3.5.0 in Rocky Linux10 (JIRA:Rocky Linux-246094)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","modified":"2026-09-15T12:30:03.321710965Z","published":"2026-09-15T12:08:56.876794Z","upstream":["CVE-2026-53783","CVE-2026-53784","CVE-2026-53785","CVE-2026-53789","CVE-2026-53790","CVE-2026-53791","CVE-2026-53793","CVE-2026-53795","CVE-2026-53802","CVE-2026-53803","CVE-2026-70452","CVE-2026-70453","CVE-2026-70454","CVE-2026-70455","CVE-2026-70456","CVE-2026-70457","CVE-2026-70458","CVE-2026-70460","CVE-2026-70461","CVE-2026-70463","CVE-2026-70464"],"database_specific":{"source_advisory":"RHSA-2026:67463","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/"},"references":[{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:67463"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515368"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515373"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515375"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515378"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515379"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515380"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515381"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515384"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515385"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515386"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515387"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515389"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515395"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515396"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515403"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515406"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515407"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515409"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515416"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515417"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515419"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:67463"}],"affected":[{"package":{"name":"rsync","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/rsync?distro=rocky-linux-10&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-3.el10_2"}],"database_specific":{"yum_repository":"BaseOS"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:67463.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"}],"credits":[{"name":"Rocky Enterprise Software Foundation"},{"name":"Red Hat"}]}