Advisories » MGASA-2026-0048

Updated rsync packages fix security vulnerability

Publication date: 06 Mar 2026
Modification date: 06 Mar 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-10158

Description

Out of bounds array access via negative index. (CVE-2025-10158)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=35177
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QZOPBIA4TYYH7HBPKXO4XFIWVXML27HR/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10158

SRPMS

9/core

• rsync-3.2.7-1.3.mga9