The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution failures during hostname-based access control evaluation. When a DNS lookup for a hostname-based deny rule fails, the daemon skips the rule rather than defaulting to a deny decision, enabling attackers who can trigger DNS failures to bypass module-level IP access controls and gain unauthorized access to restricted module file trees.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rsync-daemonUpgrade rsync-rrsyncUpgrade rsync | Oct 11, 2026 | Sep 14, 2026 |
| Alpine Linux | — | Upgrade rsync | Sep 1, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade rsyncUpgrade rsync-daemonUpgrade rsync-debuginfoUpgrade rsync-debugsource | Sep 30, 2026 | Aug 13, 2026 |
| Debian | — | Upgrade rsync | Sep 30, 2026 | Aug 13, 2026 |
| Freebsd | — | Upgrade rsync | Aug 27, 2026 | Aug 25, 2026 |
| Oracle_linux | — | Upgrade rsync-rrsyncUpgrade rsync-daemonUpgrade rsync | Oct 22, 2026 | Aug 13, 2026 |
| Redhat Openshift | — | Upgrade ose-rhel-coreos | Oct 1, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade rsync-debuginfoUpgrade rsync-debugsourceUpgrade rsyncUpgrade rsync-daemonUpgrade rsync-rrsyncNo solution exists | Aug 24, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade rsyncUpgrade rsync-debuginfoUpgrade rsync-debugsource | Sep 17, 2026 | Sep 15, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub