Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/rsync@2.6.1-1?distro=trixie
purl pkg:deb/debian/rsync@2.6.1-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-c8h5-wzqz-e3c6 Buffer overflow in the open_socket_out function in socket.c for rsync 2.5.7 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long RSYNC_PROXY environment variable. NOTE: since rsync is not setuid, this issue does not provide any additional privileges beyond those that are already available to the user. Therefore this issue may be REJECTED in the future. CVE-2004-2093
VCID-su3r-5r3f-fbfr security flaw CVE-2004-0426

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T09:30:11.348813+00:00 Debian Importer Fixing VCID-c8h5-wzqz-e3c6 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:09:26.265373+00:00 Debian Importer Fixing VCID-su3r-5r3f-fbfr https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-11T18:20:19.077238+00:00 Debian Importer Fixing VCID-c8h5-wzqz-e3c6 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:07:50.241782+00:00 Debian Importer Fixing VCID-su3r-5r3f-fbfr https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:52:11.531477+00:00 Debian Importer Fixing VCID-c8h5-wzqz-e3c6 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:52:11.449127+00:00 Debian Importer Fixing VCID-su3r-5r3f-fbfr https://security-tracker.debian.org/tracker/data/json 38.1.0