Debian rsync Vulnerabilities Lead to Privilege Escalation and DoS Risks

Multiple vulnerabilities were identified in the rsync tool, affecting Debian 11 (bullseye), Debian 12 (bookworm), and Debian 13 (trixie). These vulnerabilities could lead to local privilege escalation, denial of service, and remote memory disclosure. For Debian 11, the issues were addressed in version 3.2.3-4+deb11u4, while Debian 12 and 13 received updates in versions 3.2.7-1+deb12u5 and 3.4.1+ds1-5+deb13u3, respectively. Users are advised to upgrade their rsync packages to mitigate these risks. The vulnerabilities affect systems running these Debian versions and could be exploited by authenticated users. Detailed security advisories are available for further guidance on applying the updates.

Key Points: • Critical vulnerabilities in rsync affect Debian 11, 12, and 13 distributions. • Issues include local privilege escalation, denial of service, and remote memory disclosure. • Users are urged to upgrade rsync to the latest patched versions immediately.