LinuxNewsOpen Source SoftwareSecurity

Recent rsync security update introduced a regression (bug)

On January 14 2025, the rsync package received important security updates, which fixed serious and critical vulnerabilities, on multiple Linux distributions.

Unfortunately the package update fixing these vulnerabilities also introduced a regression. This regression negatively affects scripts using rsync, including the widely used rsnapshot backup method.

The regression was reported quickly, for example on Ubuntu's Launchpad as bug number LP #2095004:

rsync regression reported in Ubuntu's Launchpad
rsync regression reported in Ubuntu's Launchpad

The fixes for the regression were released on January 16 2025.

The latest Ubuntu LTS (24.04/Noble) fixes the regression in rsync package 3.2.7-1ubuntu1.2.

Debian 12 (Bookworm) fixes the regression in 3.2.7-1+deb12u2, announced in DSA-5843-2.

Claudio Kuenzler
Claudio has been writing way over 1000 articles on his own blog since 2008 already. He is fascinated by technology, especially Open Source Software. As a Senior Systems Engineer he has seen and solved a lot of problems - and writes about them.

You may also like

Leave a reply

Your email address will not be published. Required fields are marked *

More in:Linux