The Red Hat security advisory details numerous vulnerabilities in the rsync utility versions prior to 3.5.0. These include path traversal via --partial-dir/--backup-dir symlink (CVE-2026-70460), TLS certificate validation bypass allowing interception of encrypted sessions (CVE-2026-70454), arbitrary file deletion via malicious file lists (CVE-2026-53789), command injection through multiple code paths (CVE-2026-53790), memory corruption from crafted file entries (CVE-2026-70458), denial of service via handshake stall and algorithmic complexity (CVE-2026-70464, CVE-2026-70453), local privilege escalation via symlink following (CVE-2026-53803), unauthorized file access via symlink module root (CVE-2026-53784), authorization bypass in auth users directive parsing (CVE-2026-70463), access control bypass due to DNS resolution failure (CVE-2026-70452), daemon IP spoofing via PROXY protocol header (CVE-2026-53791), arbitrary file write via --temp-dir or --link-dest options (CVE-2026-53795), heap out-of-bounds write (CVE-2026-70456), path confinement bypass in chroot mode (CVE-2026-53793), denial of service via Zstandard compression thread exhaustion (CVE-2026-70455), memory corruption via out-of-bounds write in size parsing (CVE-2026-70457), information disclosure and denial of service via crafted files-from entry (CVE-2026-70461), arbitrary file read via symlink following (CVE-2026-53802), arbitrary file write via path traversal in --relative mode (CVE-2026-53785), and directory escape via TOCTOU race condition in rrsync (CVE-2026-53783). Red Hat has rebased rsync to version 3.5.0 in RHEL 10 to address these issues.

These vulnerabilities collectively could allow attackers to perform unauthorized file access, arbitrary file deletion and writing, command injection, denial of service, local privilege escalation, interception of encrypted sessions, and bypass of access controls and authorization mechanisms. The impact affects confidentiality, integrity, and availability of systems using vulnerable rsync versions prior to 3.5.0. Exploitation could lead to unauthorized data manipulation, system compromise, or service disruption.

A fixed version of rsync (3.5.0) has been released and rebased in Red Hat Enterprise Linux 10. Users should apply the update provided by Red Hat to remediate these vulnerabilities. For detailed update instructions, refer to the Red Hat advisory at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official update.