Linux · Security advisory · August 25, 2022

ELSA-2022-6181: Security update for 2 packages

ELSA-2022-6181, released August 25, 2022, fixes 1 CVE across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0235
83rd percentile

Fixed package versions

ProductReleaseFixed in
rsyncol 90:3.2.3-9.el9_0.2
rsync-daemonol 90:3.2.3-9.el9_0.2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-29154 rsync: An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside th... 7.4 0.0235 None reported
Showing 1 to 1 of 1 1