RLSA-2025:0325

Source
https://errata.rockylinux.org/RLSA-2025:0325
Import Source
https://storage.googleapis.com/resf-osv-data/RLSA-2025:0325.json
JSON Data
https://api.test.osv.dev/v1/vulns/RLSA-2025:0325
Related
Published
2025-01-17T16:13:44.551420Z
Modified
2025-01-17T16:16:48.591421Z
Summary
Important: rsync security update
Details

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.

Security Fix(es):

  • rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References
Credits
    • Rocky Enterprise Software Foundation
    • Red Hat

Affected packages

Rocky Linux:8 / rsync

Package

Name
rsync
Purl
pkg:rpm/rocky-linux/rsync?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:3.1.3-20.el8_10