MGASA-2015-0409
Updated rsync packages fix security vulnerability
Michael Samuel discovered that rsync was vulnerable to checksum collisions. This could prevent rsync from running and syncing files successfully, which could break various applications that use and rely on rsync (rhbz#1197601).
The patched rsync will now operate in a way that is not vulnerable to this issue as long as both the rsync client and rsync server support the new 'C' option that has been added. This issue is similar to an issue in librsync which was fixed in MGASA-2015-0146.
What each source reports
OSV No score
Updated rsync packages fix security vulnerability
Michael Samuel discovered that rsync was vulnerable to checksum collisions. This could prevent rsync from running and syncing files successfully, which could break various applications that use and rely on rsync (rhbz#1197601).
The patched rsync will now operate in a way that is not vulnerable to this issue as long as both the rsync client and rsync server support the new 'C' option that has been added. This issue is similar to an issue in librsync which was fixed in MGASA-2015-0146.
- Record
MGASA-2015-0409- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rsyncMageia:5 |
before 3.1.1-5.1.mga5 | 3.1.1-5.1.mga5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2015-0409 is a vulnerability with no CVSS score yet in rsync, published October 25, 2015. No source lists public exploit code. Fixed in rsync 3.1.1-5.1.mga5.