Debian/rsync: unknown
rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input configuration file
Action: Upgrade rsync to 3.5.0+ds1-0+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.5.0+ds1-0+deb13u1 | - |
Fixed versions
| 3.5.0+ds1-0+deb13u1 |
Sources
- osv: DEBIAN-CVE-2026-53802#Debian:13/rsync
- https://security-tracker.debian.org/tracker/CVE-2026-53802
published · modified · JSON