{"id":"CVE-2024-12085","aliases":["ALPINE-CVE-2024-12085","ALSA-2025:0324","ALSA-2025:0325","AZL-55649","AZL-55664","BELL-CVE-2024-12085","CLSA-2025-1737463274","CLSA-2025-1737464476","CLSA-2025-1737464920","CLSA-2025-1737471454","CLSA-2025-1737568622","CLSA-2025-1737569495","CLSA-2025-1737569565","CLSA-2025-1737993115","CLSA-2026-1786454415","DEBIAN-CVE-2024-12085","DLA-4015-1","DSA-5843-1","EUVD-2024-50581","GHSA-p5pg-x43v-mvqj","GHSA-xh5q-pch5-g3xq","JLSEC-2025-324","MGASA-2025-0019","OESA-2025-1060","OESA-2025-1061","OESA-2025-1062","OESA-2025-1063","OESA-2025-1064","RHBA-2025:6470","RHSA-2025:0324","RHSA-2025:0325","RHSA-2025:0637","RHSA-2025:0688","RHSA-2025:0714","RHSA-2025:0774","RHSA-2025:0787","RHSA-2025:0790","RHSA-2025:0849","RHSA-2025:0884","RHSA-2025:0885","RLSA-2025:0324","RLSA-2025:0325","SUSE-SU-2025:0156-1","SUSE-SU-2025:0157-1","SUSE-SU-2025:0165-1","SUSE-SU-2025:0166-1","SUSE-SU-2025:20122-1","SUSE-SU-2025:20223-1","SUSE-SU-2026:2038-1","SUSE-SU-2026:2048-1","SUSE-SU-2026:2083-1","SUSE-SU-2026:21726-1","UBUNTU-CVE-2024-12085","USN-7206-1","openSUSE-SU-2025:14665-1"],"status":"published","title":"Rsync: info leak via uninitialized stack contents","description":"A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.08641,"percentile":0.9518,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-119","CWE-122","CWE-22","CWE-390","CWE-908"],"published":"2025-01-09T00:00:00Z","modified":"2026-11-10T04:01:33Z","exploits":[{"source":"pocgithub","id":"Otsutez/cve-2024-12085","title":"Otsutez/cve-2024-12085","date":"2025-07-24","url":"https://github.com/Otsutez/cve-2024-12085"}],"fixes":[{"ecosystem":"Alpine:v3.18","package":"rsync","fixed_in":["3.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"rsync","fixed_in":["3.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"rsync","fixed_in":["3.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"rsync","fixed_in":["3.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"rsync","fixed_in":["3.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"rsync","fixed_in":["3.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"rsync","fixed_in":["3.4.0-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"rsync","fixed_in":["3.2.3-20.el9_5.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"rsync-daemon","fixed_in":["3.2.3-20.el9_5.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"rsync","fixed_in":["3.1.3-20.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"rsync-daemon","fixed_in":["3.1.3-20.el8_10"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"rsync","fixed_in":["3.4.1-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"rsync","fixed_in":["3.4.1-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"rsync","fixed_in":["3.2.7-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"rsync","fixed_in":["3.4.1-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"rsync","fixed_in":["3.1.3-19.el8.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"rsync-daemon","fixed_in":["3.1.3-19.el8.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"rsync","fixed_in":["3.1.1-3ubuntu1.3+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"rsync","fixed_in":["3.1.2-12.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"rsync","fixed_in":["3.1.2-2.1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"rsync","fixed_in":["3.1.2-12.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"rsync","fixed_in":["3.2.3-19.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"rsync-daemon","fixed_in":["3.2.3-19.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"rsync","fixed_in":["3.1.3-6+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"rsync","fixed_in":["3.2.7-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"rsync","fixed_in":["3.3.0+ds1-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"rsync","fixed_in":["3.3.0+ds1-3"],"sources":["osv"]},{"ecosystem":"Julia","package":"rsync_jll","fixed_in":["3.3.0+0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rsync-daemon","fixed_in":["0:3.2.3-20.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"rsync","fixed_in":["0:3.2.3-20.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"rsync-debuginfo","fixed_in":["0:3.2.3-20.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"rsync-debugsource","fixed_in":["0:3.2.3-20.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rsync","fixed_in":["0:3.1.3-20.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rsync-daemon","fixed_in":["0:3.1.3-20.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rsync-debuginfo","fixed_in":["0:3.1.3-20.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rsync-debugsource","fixed_in":["0:3.1.3-20.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"rsync-daemon","fixed_in":["0:3.2.3-19.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"rsync","fixed_in":["0:3.2.3-19.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"rsync-debuginfo","fixed_in":["0:3.2.3-19.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"rsync-debugsource","fixed_in":["0:3.2.3-19.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"rsync-daemon","fixed_in":["0:3.2.3-9.el9_0.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"rsync","fixed_in":["0:3.2.3-9.el9_0.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"rsync-debuginfo","fixed_in":["0:3.2.3-9.el9_0.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"rsync-debugsource","fixed_in":["0:3.2.3-9.el9_0.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"rsync","fixed_in":["0:3.1.2-12.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"rsync-debuginfo","fixed_in":["0:3.1.2-12.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"rsync-daemon","fixed_in":["0:3.2.3-19.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"rsync","fixed_in":["0:3.2.3-19.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"rsync-debuginfo","fixed_in":["0:3.2.3-19.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"rsync-debugsource","fixed_in":["0:3.2.3-19.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"rsync","fixed_in":["0:3.1.3-20.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"rsync-daemon","fixed_in":["0:3.1.3-20.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"rsync-debuginfo","fixed_in":["0:3.1.3-20.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"rsync-debugsource","fixed_in":["0:3.1.3-20.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"rsync","fixed_in":["0:3.1.3-14.el8_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"rsync-daemon","fixed_in":["0:3.1.3-14.el8_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"rsync-debuginfo","fixed_in":["0:3.1.3-14.el8_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"rsync-debugsource","fixed_in":["0:3.1.3-14.el8_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"rsync","fixed_in":["0:3.1.3-14.el8_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"rsync-daemon","fixed_in":["0:3.1.3-14.el8_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"rsync-debuginfo","fixed_in":["0:3.1.3-14.el8_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"rsync-debugsource","fixed_in":["0:3.1.3-14.el8_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"rsync","fixed_in":["0:3.1.3-14.el8_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"rsync-daemon","fixed_in":["0:3.1.3-14.el8_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"rsync-debuginfo","fixed_in":["0:3.1.3-14.el8_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"rsync-debugsource","fixed_in":["0:3.1.3-14.el8_6.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"rsync","fixed_in":["0:3.0.6-12.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"rsync-debuginfo","fixed_in":["0:3.0.6-12.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"rsync","fixed_in":["0:3.1.3-7.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"rsync-daemon","fixed_in":["0:3.1.3-7.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"rsync-debuginfo","fixed_in":["0:3.1.3-7.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"rsync-debugsource","fixed_in":["0:3.1.3-7.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"rsync","fixed_in":["0:3.1.3-12.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"rsync-daemon","fixed_in":["0:3.1.3-12.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"rsync-debuginfo","fixed_in":["0:3.1.3-12.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"rsync-debugsource","fixed_in":["0:3.1.3-12.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"rsync","fixed_in":["0:3.1.3-12.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"rsync-daemon","fixed_in":["0:3.1.3-12.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"rsync-debuginfo","fixed_in":["0:3.1.3-12.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"rsync-debugsource","fixed_in":["0:3.1.3-12.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"rsync","fixed_in":["0:3.1.3-12.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"rsync-daemon","fixed_in":["0:3.1.3-12.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"rsync-debuginfo","fixed_in":["0:3.1.3-12.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"rsync-debugsource","fixed_in":["0:3.1.3-12.el8_4.3"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"rsync","fixed_in":["0:3.2.3-20.el9_5.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"rsync","fixed_in":["0:3.1.3-20.el8_10"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"rsync","fixed_in":["3.1.0-2ubuntu0.4+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"rsync","fixed_in":["3.1.1-3ubuntu1.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"rsync","fixed_in":["3.1.2-2.1ubuntu1.6+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"rsync","fixed_in":["3.1.3-8ubuntu0.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"rsync","fixed_in":["3.2.7-0ubuntu0.22.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"rsync","fixed_in":["3.2.7-1ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-20.el9_5.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-20.el9_5.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-20.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-20.el8_10"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.7-r0"},{"fixed":"3.2.7-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.5-r0"},{"fixed":"3.4.1-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-12.el8.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-12.el8.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-19.el8.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-19.el8.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-12.el8.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-12.el8.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-3ubuntu1.3+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-12.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-2.1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-12.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-19.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-19.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-6+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.7-1+deb12u1"}]}],"versions":["3.2.7-1"]},{"source":"osv","ecosystem":"Debian:13","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0+ds1-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0+ds1-3"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-4+deb11u2"}]}],"versions":["3.2.3-4","3.2.3-4+deb11u1"],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.7-1+deb12u1"}]}],"versions":["3.2.7-1"],"bundled":6},{"source":"osv","ecosystem":"Julia","package":"rsync_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.3.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.7-1.2.mga9"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5-4.oe2203sp4"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.7-6.oe2403sp1"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5-4.oe2203sp3"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-11.oe2003sp4"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.7-6.oe2403"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-2.el10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"rsync-rrsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-2.el10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-2.el10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"rsync-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-2.el10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"rsync-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-2.el10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-20.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-20.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"rsync-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-20.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"rsync-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-20.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-20.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-20.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rsync-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-20.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rsync-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-20.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-19.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-19.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"rsync-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-19.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"rsync-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-19.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-9.el9_0.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-9.el9_0.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"rsync-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-9.el9_0.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"rsync-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-9.el9_0.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.2-12.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"rsync-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.2-12.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-19.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-19.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"rsync-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-19.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"rsync-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-19.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-20.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-20.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"rsync-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-20.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"rsync-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-20.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-14.el8_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-14.el8_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"rsync-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-14.el8_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"rsync-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-14.el8_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-14.el8_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-14.el8_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"rsync-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-14.el8_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"rsync-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-14.el8_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-14.el8_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-14.el8_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"rsync-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-14.el8_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"rsync-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-14.el8_6.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-12.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"rsync-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-12.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-7.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-7.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"rsync-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-7.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"rsync-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-7.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-12.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-12.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"rsync-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-12.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"rsync-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-12.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-12.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-12.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"rsync-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-12.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"rsync-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-12.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-12.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-12.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"rsync-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-12.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"rsync-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-12.el8_4.3"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-20.el9_5.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-20.el8_10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.7-150600.3.8.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.7-150600.3.8.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-150000.4.33.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-150000.4.33.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-150000.4.33.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-150000.4.33.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-150000.4.33.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-150000.4.33.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-150400.3.17.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-150400.3.17.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-150400.3.17.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-150400.3.17.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-150400.3.17.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-150400.3.17.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-150400.3.17.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-150400.3.17.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-150400.3.17.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-150400.3.17.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-150400.3.17.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-150400.3.17.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-150400.3.17.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-3.22.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-3.22.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.7-4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-slfo.1.1_3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-2ubuntu0.4+esm1"}]}],"versions":["3.0.9-4ubuntu1","3.1.0-2","3.1.0-2ubuntu0.1","3.1.0-2ubuntu0.2","3.1.0-2ubuntu0.3","3.1.0-2ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-3ubuntu1.3+esm3"}]}],"versions":["3.1.1-3","3.1.1-3ubuntu1","3.1.1-3ubuntu1.1","3.1.1-3ubuntu1.2","3.1.1-3ubuntu1.3","3.1.1-3ubuntu1.3+esm1","3.1.1-3ubuntu1.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-2.1ubuntu1.6+esm1"}]}],"versions":["3.1.2-2","3.1.2-2.1","3.1.2-2.1ubuntu1","3.1.2-2.1ubuntu1.1","3.1.2-2.1ubuntu1.2","3.1.2-2.1ubuntu1.3","3.1.2-2.1ubuntu1.4","3.1.2-2.1ubuntu1.5","3.1.2-2.1ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-8ubuntu0.8"}]}],"versions":["3.1.3-6","3.1.3-8","3.1.3-8ubuntu0.1","3.1.3-8ubuntu0.2","3.1.3-8ubuntu0.3","3.1.3-8ubuntu0.4","3.1.3-8ubuntu0.5","3.1.3-8ubuntu0.7"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.7-0ubuntu0.22.04.3"}]}],"versions":["3.2.3-4ubuntu1","3.2.3-4ubuntu2","3.2.3-8ubuntu1","3.2.3-8ubuntu2","3.2.3-8ubuntu3","3.2.3-8ubuntu3.1","3.2.7-0ubuntu0.22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.7-1ubuntu1.1"}]}],"versions":["3.2.7-1","3.2.7-1build1","3.2.7-1build2","3.2.7-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-2ubuntu0.4+esm1"}]}],"versions":["3.0.9-4ubuntu1","3.1.0-2","3.1.0-2ubuntu0.1","3.1.0-2ubuntu0.2","3.1.0-2ubuntu0.3","3.1.0-2ubuntu0.4"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-3ubuntu1.3+esm3"}]}],"versions":["3.1.1-3","3.1.1-3ubuntu1","3.1.1-3ubuntu1.1","3.1.1-3ubuntu1.2","3.1.1-3ubuntu1.3","3.1.1-3ubuntu1.3+esm1","3.1.1-3ubuntu1.3+esm2"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-2.1ubuntu1.6+esm1"}]}],"versions":["3.1.2-2","3.1.2-2.1","3.1.2-2.1ubuntu1","3.1.2-2.1ubuntu1.1","3.1.2-2.1ubuntu1.2","3.1.2-2.1ubuntu1.3","3.1.2-2.1ubuntu1.4","3.1.2-2.1ubuntu1.5","3.1.2-2.1ubuntu1.6"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-8ubuntu0.8"}]}],"versions":["3.1.3-6","3.1.3-8","3.1.3-8ubuntu0.1","3.1.3-8ubuntu0.2","3.1.3-8ubuntu0.3","3.1.3-8ubuntu0.4","3.1.3-8ubuntu0.5","3.1.3-8ubuntu0.7"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.7-0ubuntu0.22.04.3"}]}],"versions":["3.2.3-4ubuntu1","3.2.3-4ubuntu2","3.2.3-8ubuntu1","3.2.3-8ubuntu2","3.2.3-8ubuntu3","3.2.3-8ubuntu3.1","3.2.7-0ubuntu0.22.04.2"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.7-1ubuntu1.1"}]}],"versions":["3.2.7-1","3.2.7-1build1","3.2.7-1build2","3.2.7-1ubuntu1"],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-1.1"}]}],"bundled":6}],"products":[{"vendor":"almalinux","product":"almalinux"},{"vendor":"archlinux","product":"arch_linux"},{"vendor":"gentoo","product":"linux"},{"vendor":"nixos","product":"nixos"},{"vendor":"red hat","product":"openshift compliance operator 1"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6 extended lifecycle support  - extension"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.2 advanced update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.0 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 extended update support"},{"vendor":"red hat","product":"red hat openshift container platform 4.12"},{"vendor":"red hat","product":"red hat openshift container platform 4.13"},{"vendor":"red hat","product":"red hat openshift container platform 4.14"},{"vendor":"red hat","product":"red hat openshift container platform 4.15"},{"vendor":"red hat","product":"red hat openshift container platform 4.16"},{"vendor":"red hat","product":"red hat openshift container platform 4.17"},{"vendor":"red hat","product":"red hat openshift container platform 4.18"},{"vendor":"red hat","product":"rhol-5.8-rhel-9"},{"vendor":"red hat","product":"rhol-5.9-rhel-9"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_for_arm_64"},{"vendor":"redhat","product":"enterprise_linux_for_arm_64_eus"},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems"},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems_eus"},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian"},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian_eus"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_update_services_for_sap_solutions"},{"vendor":"redhat","product":"openshift"},{"vendor":"redhat","product":"openshift_container_platform"},{"vendor":"samba","product":"rsync"},{"vendor":"suse","product":"suse_linux"},{"vendor":"tritondatacenter","product":"smartos"}],"references":[{"url":"https://access.redhat.com/errata/RHBA-2025:6470","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:6122","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:0324","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:0325","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:0637","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:0688","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:0714","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:0774","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:0787","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:0790","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:0849","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:0884","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:0885","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1120","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1123","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1128","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1225","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1227","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1242","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1451","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:21885","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:2701","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-12085","tags":["vdb-entry","x_refsource_REDHAT","Third Party Advisory","report","advisory","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2330539","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://kb.cert.org/vuls/id/952657","tags":["Third Party Advisory","web","article"]},{"url":"https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj","tags":["exploit","Exploit","Third Party Advisory","evidence","web"]},{"url":"https://security.netapp.com/advisory/ntap-20250131-0002/","tags":["advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00008.html","tags":["web"]},{"url":"https://www.kb.cert.org/vuls/id/952657","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-12085","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20250131-0002"},{"url":"https://github.com/advisories/GHSA-xh5q-pch5-g3xq"},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-12085","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2330539","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-0324.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-0325.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-12085","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2025-1737463274.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos8stream-els/CLSA-2025-1737464476.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2025-1737464920.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2025-1737471454.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/oraclelinux7-els/CLSA-2025-1737568622.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18-els/CLSA-2025-1737569495.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2025-1737569565.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1737993115.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1786454415.html","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2025/01/14/6","tags":["web"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-12084","tags":["advisory","report"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/12xxx/CVE-2024-12084.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-12084","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2330527","tags":["report"]},{"url":"https://github.com/RsyncProject/rsync","tags":["package"]},{"url":"https://catalog.redhat.com/software/containers/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/12xxx/CVE-2024-12085.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19368","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:20603","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:29197","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-12086","tags":["advisory","report"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/12xxx/CVE-2024-12086.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-12086","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2330577","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23154","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23235","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23407","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23415","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23416","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23842","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23853","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23854","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23858","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:2600","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7050","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8385","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-12087","tags":["advisory","report"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/12xxx/CVE-2024-12087.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-12087","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2330672","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-12088","tags":["advisory","report"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/12xxx/CVE-2024-12088.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-12088","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2330676","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-12085","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0019.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33920","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/01/14/3","tags":["web"]},{"url":"https://lists.debian.org/debian-security-announce/2025/msg00004.html","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-7206-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7206-2","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1060","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-12747","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1061","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1062","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1063","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1064","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.0_release_notes/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-71293","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_6470.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-12084","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-12085","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-12086","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-12087","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-12088","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-12747","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2332968","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-12747","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0324.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0325.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0637.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0688.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0714.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0774.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0787.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0790.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0849.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0884.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0885.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:0324","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:0325","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250156-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1234100","tags":["report"]},{"url":"https://bugzilla.suse.com/1234101","tags":["report"]},{"url":"https://bugzilla.suse.com/1234102","tags":["report"]},{"url":"https://bugzilla.suse.com/1234103","tags":["report"]},{"url":"https://bugzilla.suse.com/1234104","tags":["report"]},{"url":"https://bugzilla.suse.com/1235475","tags":["report"]},{"url":"https://bugzilla.suse.com/1235895","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-12084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-12085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-12086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-12087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-12088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-12747","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250157-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250165-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250166-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520122-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520223-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262038-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1254441","tags":["report"]},{"url":"https://bugzilla.suse.com/1262223","tags":["report"]},{"url":"https://bugzilla.suse.com/1264511","tags":["report"]},{"url":"https://bugzilla.suse.com/1264512","tags":["report"]},{"url":"https://bugzilla.suse.com/1264513","tags":["report"]},{"url":"https://bugzilla.suse.com/1264514","tags":["report"]},{"url":"https://bugzilla.suse.com/1264515","tags":["report"]},{"url":"https://bugzilla.suse.com/1265296","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45232","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262048-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262083-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621726-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1201840","tags":["report"]},{"url":"https://bugzilla.suse.com/1202970","tags":["report"]},{"url":"https://bugzilla.suse.com/1204538","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29154","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2024-12085","tags":["report"]},{"url":"https://kb.cert.org/vince/comm/case/2083/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7206-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-12084","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-12086","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-12087","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-12088","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-12747","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-12085","title":"Rsync: info leak via uninitialized stack contents","description":"A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.","status":"published","published":"2025-01-14T17:37:16.036Z","modified":"2026-11-10T04:01:33.518Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-908"],"updated_at":"2026-11-10T04:36:56.913427Z"}],"euvd":[{"id":"EUVD-2024-50581","description":"A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.","status":"published","published":"2025-01-14T17:37:16Z","modified":"2026-11-10T04:01:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-10T05:19:59.129782Z"}],"ghsa":[{"id":"GHSA-xh5q-pch5-g3xq","title":"A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums....","description":"A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.","status":"published","published":"2025-01-14T18:32:00Z","modified":"2026-08-11T18:31:39Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-119","CWE-908"],"updated_at":"2026-11-02T15:10:19.387522Z"}],"nvd":[{"id":"CVE-2024-12085","description":"A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.","status":"published","published":"2025-01-14T18:15:25.123Z","modified":"2026-11-10T04:16:36.593Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-908"],"updated_at":"2026-11-10T07:18:19.059464Z"}],"osv":[{"id":"ALPINE-CVE-2024-12085","description":"A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.","status":"published","published":"2025-01-14T18:15:25.123Z","modified":"2026-11-02T11:17:50.055272453Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"BELL-CVE-2024-12085","status":"published","published":"2025-01-15T05:56:53.648862Z","modified":"2026-01-26T09:42:48.296823Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:19.288949Z"},{"id":"CVE-2024-12084","title":"Rsync: heap buffer overflow in rsync due to improper checksum length handling","description":"A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.","status":"published","published":"2025-01-15T14:16:35.363Z","modified":"2026-11-05T21:15:38.562689747Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-122"],"updated_at":"2026-11-05T22:01:21.792402Z"},{"id":"CVE-2024-12085","title":"Rsync: info leak via uninitialized stack contents","description":"A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.","status":"published","published":"2025-01-14T17:37:16.036Z","modified":"2026-11-11T02:30:39.979603163Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-908"],"updated_at":"2026-11-11T11:06:27.455443Z"},{"id":"CVE-2024-12086","title":"Rsync: rsync server leaks arbitrary client files","description":"A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare with in order to determine what data needs to be sent to the server. By sending specially constructed checksum values for arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the responses from the client.","status":"published","published":"2025-01-14T17:37:54.96Z","modified":"2026-11-07T02:30:38.971997729Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-390"],"updated_at":"2026-11-07T03:07:52.191907Z"},{"id":"CVE-2024-12087","title":"Rsync: path traversal vulnerability in rsync","description":"A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to write files outside of the client's intended destination directory. A malicious server could write malicious files to arbitrary locations named after valid directories/paths on the client.","status":"published","published":"2025-01-14T17:57:33.927Z","modified":"2026-11-04T02:30:28.908242204Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-04T02:55:01.518827Z"},{"id":"CVE-2024-12088","title":"Rsync: --safe-links option bypass leads to path traversal","description":"A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.","status":"published","published":"2025-01-14T17:38:34.89Z","modified":"2026-11-07T02:30:43.265535807Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-07T03:07:52.191907Z"},{"id":"DEBIAN-CVE-2024-12085","description":"A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.","status":"published","published":"2025-01-14T18:15:25.123Z","modified":"2026-11-10T09:47:35.159286734Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-10T10:26:30.347596Z"},{"id":"JLSEC-2025-324","title":"A flaw was found in rsync which could be triggered when rsync compares file checksums","description":"A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.","status":"published","published":"2025-11-25T22:50:06.167Z","modified":"2026-07-18T00:01:19.639072281Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"OESA-2025-1060","title":"rsync security update","description":"Rsync is an open source utility that provides fast incremental file transfer. It uses the \u0026quot;rsync algorithm\u0026quot; which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files are present at one of the ends of the link beforehand.\r\n\r\nSecurity Fix(es):\r\n\r\n(CVE-2024-12085)\r\n\r\n(CVE-2024-12086)\r\n\r\n(CVE-2024-12087)\r\n\r\n(CVE-2024-12088)\r\n\r\n(CVE-2024-12747)","status":"published","published":"2025-01-17T11:08:09Z","modified":"2026-08-18T01:17:42.894875429Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2025-1061","title":"rsync security update","description":"Rsync is an open source utility that provides fast incremental file transfer. It uses the \u0026quot;rsync algorithm\u0026quot; which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files are present at one of the ends of the link beforehand.\r\n\r\nSecurity Fix(es):\r\n\r\n(CVE-2024-12084)\r\n\r\n(CVE-2024-12085)\r\n\r\n(CVE-2024-12086)\r\n\r\n(CVE-2024-12087)\r\n\r\n(CVE-2024-12088)\r\n\r\n(CVE-2024-12747)","status":"published","published":"2025-01-17T11:08:09Z","modified":"2026-08-18T01:17:42.88623039Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2025-1062","title":"rsync security update","description":"Rsync is an open source utility that provides fast incremental file transfer. It uses the \u0026quot;rsync algorithm\u0026quot; which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files are present at one of the ends of the link beforehand.\r\n\r\nSecurity Fix(es):\r\n\r\n(CVE-2024-12085)\r\n\r\n(CVE-2024-12086)\r\n\r\n(CVE-2024-12087)\r\n\r\n(CVE-2024-12088)\r\n\r\n(CVE-2024-12747)","status":"published","published":"2025-01-17T11:08:09Z","modified":"2026-08-18T01:17:42.754725306Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2025-1063","title":"rsync security update","description":"Rsync is an open source utility that provides fast incremental file transfer. It uses the \u0026quot;rsync algorithm\u0026quot; which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files are present at one of the ends of the link beforehand.\r\n\r\nSecurity Fix(es):\r\n\r\n(CVE-2024-12085)\r\n\r\n(CVE-2024-12086)\r\n\r\n(CVE-2024-12087)\r\n\r\n(CVE-2024-12088)\r\n\r\n(CVE-2024-12747)","status":"published","published":"2025-01-17T11:08:09Z","modified":"2026-08-18T01:17:42.868723461Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2025-1064","title":"rsync security update","description":"Rsync is an open source utility that provides fast incremental file transfer. It uses the \u0026quot;rsync algorithm\u0026quot; which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files are present at one of the ends of the link beforehand.\r\n\r\nSecurity Fix(es):\r\n\r\n(CVE-2024-12084)\r\n\r\n(CVE-2024-12085)\r\n\r\n(CVE-2024-12086)\r\n\r\n(CVE-2024-12087)\r\n\r\n(CVE-2024-12088)\r\n\r\n(CVE-2024-12747)","status":"published","published":"2025-01-17T11:08:09Z","modified":"2026-08-18T01:17:42.836740202Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"RHBA-2025:6470","title":"Red Hat Bug Fix Advisory: rsync bug fix and enhancement update","status":"published","published":"2025-07-08T10:03:37Z","modified":"2026-10-14T10:05:55Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2025:0324","title":"Red Hat Security Advisory: rsync security update","status":"published","published":"2025-01-15T10:02:45Z","modified":"2026-10-14T10:06:00Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:0325","title":"Red Hat Security Advisory: rsync security update","status":"published","published":"2025-01-15T10:02:45Z","modified":"2026-10-14T10:06:00Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:0637","title":"Red Hat Security Advisory: rsync security update","status":"published","published":"2025-01-23T10:02:40Z","modified":"2026-10-14T10:06:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:0688","title":"Red Hat Security Advisory: rsync security update","status":"published","published":"2025-01-28T10:10:03Z","modified":"2026-10-14T10:06:11Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:0714","title":"Red Hat Security Advisory: rsync security update","status":"published","published":"2025-01-28T10:10:06Z","modified":"2026-10-14T10:06:12Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:0774","title":"Red Hat Security Advisory: rsync security update","status":"published","published":"2025-01-29T10:04:08Z","modified":"2026-10-14T10:06:14Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:0787","title":"Red Hat Security Advisory: rsync security update","status":"published","published":"2025-01-29T10:04:10Z","modified":"2026-10-14T10:06:14Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:0790","title":"Red Hat Security Advisory: rsync security update","status":"published","published":"2025-01-30T10:03:46Z","modified":"2026-10-14T10:06:15Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:0849","title":"Red Hat Security Advisory: rsync security update","status":"published","published":"2025-01-31T10:02:16Z","modified":"2026-10-14T10:06:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:0884","title":"Red Hat Security Advisory: rsync security update","status":"published","published":"2025-02-04T10:11:15Z","modified":"2026-10-14T10:06:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:0885","title":"Red Hat Security Advisory: rsync security update","status":"published","published":"2025-02-04T10:11:16Z","modified":"2026-10-14T10:06:20Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"UBUNTU-CVE-2024-12085","description":"A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.","status":"published","published":"2025-01-09T00:00:00Z","modified":"2026-02-04T04:31:55.868661Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T16:54:41.555387Z"},{"id":"ALSA-2025:0324","title":"Important: rsync security update","description":"The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.  \n\nSecurity Fix(es):  \n\n  * rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-01-15T00:00:00Z","modified":"2026-10-29T11:32:12.287747791Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:0325","title":"Important: rsync security update","description":"The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.  \n\nSecurity Fix(es):  \n\n  * rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-01-15T00:00:00Z","modified":"2026-10-29T11:02:22.074423605Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"AZL-55649","title":"CVE-2024-12085 affecting package rsync for versions less than 3.4.1-1","description":"A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.","status":"published","published":"2025-01-14T18:15:25Z","modified":"2026-04-21T04:35:57.65954Z","updated_at":"2026-11-02T15:28:06.879785Z"},{"id":"AZL-55664","title":"CVE-2024-12085 affecting package rsync for versions less than 3.4.1-1","description":"A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.","status":"published","published":"2025-01-14T18:15:25Z","modified":"2026-04-21T04:53:37.389785Z","updated_at":"2026-11-02T15:28:06.879785Z"},{"id":"CLSA-2025-1737463274","title":"rsync: Fix of 2 CVEs","description":"- CVE-2024-12088: fix path traversal vulnerability by properly verifying\n  symbolic link destinations\n- CVE-2024-12085: fix issue with checksum length manipulation leading to\n  uninitialized memory leak","status":"published","published":"2025-01-21T14:34:07Z","modified":"2026-10-21T10:48:05.792095569Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2025-1737464476","title":"rsync: Fix of CVE-2024-12085","description":"- CVE-2024-12085: prevent leak of uninitialised stack data in hash_search","status":"published","published":"2025-01-21T13:01:22Z","modified":"2026-06-01T00:32:57.640875282Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2025-1737464920","title":"rsync: Fix of 2 CVEs","description":"- CVE-2024-12088: fix path traversal vulnerability by properly verifying\n  symbolic link destinations\n- CVE-2024-12085: fix issue with checksum length manipulation leading to\n  uninitialized memory leak","status":"published","published":"2025-01-21T13:08:47Z","modified":"2026-10-21T10:48:07.920670183Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2025-1737471454","title":"Fix CVE(s): CVE-2024-12085","description":"   * SECURITY UPDATE: possible information leak via checksum comparison\n     - debian/patches/CVE-2024-12085.patch: fix issue with checksum length\n       manipulation leading to uninitialized memory leak\n     - CVE-2024-12085","status":"published","published":"2025-01-21T14:57:40Z","modified":"2026-06-04T10:03:21.073947Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2025-1737568622","title":"rsync: Fix of CVE-2024-12085","description":"- CVE-2024-12085: fix to prevent information leak off the stack","status":"published","published":"2025-01-22T17:57:08Z","modified":"2026-06-01T00:32:56.675314495Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2025-1737569495","title":"Fix CVE(s): CVE-2024-12085","description":"   * SECURITY UPDATE: possible information leak via checksum comparison\n     - debian/patches/CVE-2024-12085.patch: fix issue with checksum length\n       manipulation leading to uninitialized memory leak\n     - CVE-2024-12085","status":"published","published":"2025-01-22T18:11:41Z","modified":"2026-06-04T10:03:45.382358Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2025-1737569565","title":"rsync: Fix of CVE-2024-12085","description":"- CVE-2024-12085: fix to prevent information leak off the stack","status":"published","published":"2025-01-22T18:12:51Z","modified":"2026-06-01T00:33:17.765163441Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2025-1737993115","title":"rsync: Fix of CVE-2024-12085","description":"- CVE-2024-12085: Fix issue where checksum length manipulation could leak\n  uninitialized stack data during file comparison.","status":"published","published":"2025-01-27T15:52:01Z","modified":"2026-06-01T00:30:33.037969288Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2026-1786454415","title":"Fix CVE(s): CVE-2024-12085","description":"   * SECURITY UPDATE: information leak of uninitialized stack memory via an\n     attacker-controlled checksum length (s2length) in hash_search():\n     - debian/patches/els/0008-CVE-2024-12085.patch: zero the local sum2\n       buffer on entry to hash_search().\n     - CVE-2024-12085.","status":"published","published":"2026-08-11T13:20:26Z","modified":"2026-10-26T09:31:52.6696491Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"DLA-4015-1","title":"rsync - security update","status":"published","published":"2025-01-14T00:00:00Z","modified":"2026-03-09T01:22:12.663327Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5843-1","title":"rsync - security update","status":"published","published":"2025-01-14T00:00:00Z","modified":"2026-03-09T02:09:48.977956Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2025-0019","title":"Updated rsync packages fix security vulnerabilities","description":"Heap buffer overflow in rsync due to improper checksum length handling.\n(CVE-2024-12084)\nInfo leak via uninitialized stack contents. (CVE-2024-12085)\nRsync server leaks arbitrary client files. (CVE-2024-12086)\nPath traversal vulnerability in rsync. (CVE-2024-12087)\nRsync --safe-links option bypass leads to path traversal.\n(CVE-2024-12088)\nRace condition in rsync handling symbolic links. (CVE-2024-12747)\n","status":"published","published":"2025-01-22T03:19:16Z","modified":"2026-04-16T04:40:55.151740976Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2025:14665-1","title":"rsync-3.4.1-1.1 on GA media","description":"These are all security issues fixed in the rsync-3.4.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-01-18T00:00:00Z","modified":"2026-02-04T02:52:31.427536Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"RLSA-2025:0324","title":"Important: rsync security update","description":"The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.\n\nSecurity Fix(es):\n\n* rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-03-17T20:16:43.608626Z","modified":"2026-02-04T18:45:05.956596Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2025:0325","title":"Important: rsync security update","description":"The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.\n\nSecurity Fix(es):\n\n* rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-01-17T16:13:44.55142Z","modified":"2026-02-05T08:15:11.644469Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"SUSE-SU-2025:0156-1","title":"Security update for rsync","description":"This update for rsync fixes the following issues:\n\n- CVE-2024-12084: heap buffer overflow in checksum parsing. (bsc#1234100)\n- CVE-2024-12085: leak of uninitialized stack data on the server leading to possible ASLR bypass. (bsc#1234101)\n- CVE-2024-12086: leak of a client machine's file contents through the processing of checksum data. (bsc#1234102)\n- CVE-2024-12087: arbitrary file overwrite possible on clients when symlink syncing is enabled. (bsc#1234103)\n- CVE-2024-12088: bypass of the --safe-links flag may allow the placement of unsafe symlinks in a client. (bsc#1234104)\n- CVE-2024-12747: race condition in rsync handling symbolic links (bsc#1235475)\n","status":"published","published":"2025-01-17T11:59:08Z","modified":"2026-02-04T03:03:32.541234Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:0157-1","title":"Security update for rsync","description":"This update for rsync fixes the following issues:\n\n- CVE-2024-12085: leak of uninitialized stack data on the server leading to possible ASLR bypass. (bsc#1234101)\n- CVE-2024-12086: leak of a client machine's file contents through the processing of checksum data. (bsc#1234102)\n- CVE-2024-12087: arbitrary file overwrite possible on clients when symlink syncing is enabled. (bsc#1234103)\n- CVE-2024-12088: bypass of the --safe-links flag may allow the placement of unsafe symlinks in a client. (bsc#1234104)\n- CVE-2024-12747: Fixed a race condition in rsync handling symbolic links. (bsc#1235475)\n","status":"published","published":"2025-01-17T11:59:43Z","modified":"2025-05-02T04:36:17.198496Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:0165-1","title":"Security update for rsync","description":"This update for rsync fixes the following issues:\n\n- CVE-2024-12085: leak of uninitialized stack data on the server leading to possible ASLR bypass. (bsc#1234101)\n- CVE-2024-12086: leak of a client machine's file contents through the processing of checksum data. (bsc#1234102)\n- CVE-2024-12087: arbitrary file overwrite possible on clients when symlink syncing is enabled. (bsc#1234103)\n- CVE-2024-12088: bypass of the --safe-links flag may allow the placement of unsafe symlinks in a client. (bsc#1234104)\n- CVE-2024-12747: Fixed a race condition in rsync handling symbolic links. (bsc#1235475)\n","status":"published","published":"2025-01-17T16:09:34Z","modified":"2026-02-04T03:48:30.617711Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:0166-1","title":"Security update for rsync","description":"This update for rsync fixes the following issues:\n\n- CVE-2024-12085: leak of uninitialized stack data on the server leading to possible ASLR bypass. (bsc#1234101)\n- CVE-2024-12086: leak of a client machine's file contents through the processing of checksum data. (bsc#1234102)\n- CVE-2024-12087: arbitrary file overwrite possible on clients when symlink syncing is enabled. (bsc#1234103)\n- CVE-2024-12088: bypass of the --safe-links flag may allow the placement of unsafe symlinks in a client. (bsc#1234104)\n- CVE-2024-12747: Fixed a race condition in handling symbolic links. (bsc#1235475)\n","status":"published","published":"2025-01-17T16:09:43Z","modified":"2026-02-04T04:12:38.928189Z","updated_at":"2026-11-02T15:53:56.123059Z"}]},"sources_more":{"osv":7}}