RLSA-2025:0324

Source
https://errata.rockylinux.org/RLSA-2025:0324
Import Source
https://storage.googleapis.com/resf-osv-data/RLSA-2025:0324.json
JSON Data
https://api.osv.dev/v1/vulns/RLSA-2025:0324
Related
Published
2025-03-17T20:16:43.608626Z
Modified
2025-03-17T20:18:45.234974Z
Summary
Important: rsync security update
Details

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.

Security Fix(es):

  • rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References
Credits
    • Rocky Enterprise Software Foundation
    • Red Hat

Affected packages

Rocky Linux:9 / rsync

Package

Name
rsync
Purl
pkg:rpm/rocky-linux/rsync?distro=rocky-linux-9&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:3.2.3-20.el9_5.1