[SECURITY] [DSA 6527-1] rsync security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-6527-1 security@debian.org
https://www.debian.org/security/ Salvatore Bonaccorso
September 28, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : rsync
CVE ID : CVE-2026-53783 CVE-2026-53784 CVE-2026-53785 CVE-2026-53786
CVE-2026-53788 CVE-2026-53789 CVE-2026-53790 CVE-2026-53791
CVE-2026-53792 CVE-2026-53793 CVE-2026-53794 CVE-2026-53795
CVE-2026-53796 CVE-2026-53797 CVE-2026-53798 CVE-2026-53799
CVE-2026-53800 CVE-2026-53801 CVE-2026-53802 CVE-2026-53803
CVE-2026-70452 CVE-2026-70453 CVE-2026-70454 CVE-2026-70455
CVE-2026-70456 CVE-2026-70457 CVE-2026-70458 CVE-2026-70459
CVE-2026-70460 CVE-2026-70461 CVE-2026-70462 CVE-2026-70463
CVE-2026-70464
Several vulnerabilities were discovered in rsync, a fast, versatile,
remote (and local) file-copying tool, which could result in local
privilege escalation, bypass of intended access restrictions,
information disclosure, denial of service or the execution of arbitrary
code.
Details can be found at
https://download.samba.org/pub/rsync/NEWS#3.5.0
For the stable distribution (trixie), these problems have been fixed in
version 3.5.0+ds1-0+deb13u1.
We recommend that you upgrade your rsync packages.
For the detailed security status of rsync please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/rsync
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----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=kBmO
-----END PGP SIGNATURE-----
Reply to: