Advisories » MGASA-2026-0487

Updated rsync package fixes security vulnerabilities

Publication date: 12 Oct 2026
Modification date: 12 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-53783 , CVE-2026-53784 , CVE-2026-53785 , CVE-2026-53786 , CVE-2026-53788 , CVE-2026-53789 , CVE-2026-53790 , CVE-2026-53791 , CVE-2026-53792 , CVE-2026-53793 , CVE-2026-53794 , CVE-2026-53795 , CVE-2026-53796 , CVE-2026-53797 , CVE-2026-53798 , CVE-2026-53799 , CVE-2026-53800 , CVE-2026-53801 , CVE-2026-53802 , CVE-2026-53803 , CVE-2026-70452 , CVE-2026-70453 , CVE-2026-70454 , CVE-2026-70455 , CVE-2026-70456 , CVE-2026-70457 , CVE-2026-70458 , CVE-2026-70459 , CVE-2026-70460 , CVE-2026-70461 , CVE-2026-70462 , CVE-2026-70463 , CVE-2026-70464

Description

Several vulnerabilities were discovered in rsync, a fast, versatile,
remote (and local) file-copying tool, which could result in local
privilege escalation, bypass of intended access restrictions,
information disclosure, denial of service or the execution of arbitrary
code.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36138
• https://www.openwall.com/lists/oss-security/2026/08/13/1
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AHYZL7IBFVF463AGDTJUQBYUJUW7JUAB/
• https://lists.debian.org/debian-security-announce/2026/msg00440.html
• https://www.cve.org/CVERecord?id=CVE-2026-53783
• https://www.cve.org/CVERecord?id=CVE-2026-53784
• https://www.cve.org/CVERecord?id=CVE-2026-53785
• https://www.cve.org/CVERecord?id=CVE-2026-53786
• https://www.cve.org/CVERecord?id=CVE-2026-53788
• https://www.cve.org/CVERecord?id=CVE-2026-53789
• https://www.cve.org/CVERecord?id=CVE-2026-53790
• https://www.cve.org/CVERecord?id=CVE-2026-53791
• https://www.cve.org/CVERecord?id=CVE-2026-53792
• https://www.cve.org/CVERecord?id=CVE-2026-53793
• https://www.cve.org/CVERecord?id=CVE-2026-53794
• https://www.cve.org/CVERecord?id=CVE-2026-53795
• https://www.cve.org/CVERecord?id=CVE-2026-53796
• https://www.cve.org/CVERecord?id=CVE-2026-53797
• https://www.cve.org/CVERecord?id=CVE-2026-53798
• https://www.cve.org/CVERecord?id=CVE-2026-53799
• https://www.cve.org/CVERecord?id=CVE-2026-53800
• https://www.cve.org/CVERecord?id=CVE-2026-53801
• https://www.cve.org/CVERecord?id=CVE-2026-53802
• https://www.cve.org/CVERecord?id=CVE-2026-53803
• https://www.cve.org/CVERecord?id=CVE-2026-70452
• https://www.cve.org/CVERecord?id=CVE-2026-70453
• https://www.cve.org/CVERecord?id=CVE-2026-70454
• https://www.cve.org/CVERecord?id=CVE-2026-70455
• https://www.cve.org/CVERecord?id=CVE-2026-70456
• https://www.cve.org/CVERecord?id=CVE-2026-70457
• https://www.cve.org/CVERecord?id=CVE-2026-70458
• https://www.cve.org/CVERecord?id=CVE-2026-70459
• https://www.cve.org/CVERecord?id=CVE-2026-70460
• https://www.cve.org/CVERecord?id=CVE-2026-70461
• https://www.cve.org/CVERecord?id=CVE-2026-70462
• https://www.cve.org/CVERecord?id=CVE-2026-70463
• https://www.cve.org/CVERecord?id=CVE-2026-70464

SRPMS

10/core

• rsync-3.5.1-1.mga10