<?xml version="1.0" encoding="UTF-8"?>        <rss version="2.0"
             xmlns:atom="http://www.w3.org/2005/Atom"
             xmlns:dc="http://purl.org/dc/elements/1.1/"
             xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
             xmlns:admin="http://webns.net/mvcb/"
             xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
             xmlns:content="http://purl.org/rss/1.0/modules/content/">
        <channel>
            <title>
									Steps to Patch Rsync 9.8 Vulnerability in Linux - Cybersecurity Forum				            </title>
            <link>https://www.virtualizationhowto.com/community/cybersecurity-forum/stpes-to-patch-rsync-9-8-vulnerability-in-linux/</link>
            <description>Virtualization Howto Discussion Board</description>
            <language>en-US</language>
            <lastBuildDate>Sat, 08 Aug 2026 01:36:07 +0000</lastBuildDate>
            <generator>wpForo</generator>
            <ttl>60</ttl>
							                    <item>
                        <title>Steps to Patch Rsync 9.8 Vulnerability in Linux</title>
                        <link>https://www.virtualizationhowto.com/community/cybersecurity-forum/stpes-to-patch-rsync-9-8-vulnerability-in-linux/#post-1120</link>
                        <pubDate>Thu, 16 Jan 2025 18:01:05 +0000</pubDate>
                        <description><![CDATA[In case you haven&#039;t heard, there is a really nasty CVSS 9.8 bug in Rsync that was discovered by Google. This is definitely one that you want to get patched sooner than later. From the commun...]]></description>
                        <content:encoded><![CDATA[<p>In case you haven't heard, there is a really nasty CVSS 9.8 bug in Rsync that was discovered by Google. This is definitely one that you want to get patched sooner than later. From the communications seen so far, the patched version is 3.4.0. </p>
<p><a href="https://github.com/RsyncProject/rsync">RsyncProject/rsync</a></p>
<p>Take note of the steps below for patching across different Linux distros:</p>
<h3><strong>Distros based on Debian (Ubuntu, Debian)</strong></h3>
<p>Check the repos for updates </p>
<pre contenteditable="false">sudo apt update</pre>
<p>Update rsync:</p>
<pre contenteditable="false">sudo apt install --only-upgrade rsync</pre>
<p>After updating, check your version of rsync:</p>
<pre contenteditable="false">rsync --version</pre>
<p> If the version in the repository is outdated, install build dependencies:</p>
<pre contenteditable="false">sudo apt install build-essential wget libssl-dev -y</pre>
<p>Download the latest rsync source code:</p>
<pre contenteditable="false">wget https://download.samba.org/pub/rsync/src/rsync-3.4.0.tar.gz</pre>
<p>Extract the package and compile:</p>
<pre contenteditable="false">tar -xzf rsync-3.4.0.tar.gz cd rsync-3.4.0 ./configure make sudo make install</pre>
<p><br />Finally, once you have installed, verify the rsync version:</p>
<pre contenteditable="false">rsync --version</pre>
<p> </p>
<h3><strong>Distros based on RHEL (CentOS, Rocky Linux, AlmaLinux, Fedora)</strong></h3>
<p>You can use DNF or Yum to update:</p>
<pre contenteditable="false">sudo yum update rsync

sudo dnf update rsync</pre>
<p>Finally, chjeck the version of rsync:</p>
<pre contenteditable="false">rsync --version</pre>
<br />
<div class="contain-inline-size rounded-md border- border-token-border-medium relative bg-token-sidebar-surface-primary dark:bg-gray-950">
<div class="overflow-y-auto p-4" dir="ltr">You can also enable EPEL or use a third-party repository:</div>
</div>
<div dir="ltr">
<pre contenteditable="false">sudo yum install epel-release -y

sudo yum install rsync</pre>
</div>
<h4><strong>Build from Source</strong></h4>
<p>If the repository version is still outdated, follow the same steps as in the Debian instructions for compiling from source.</p>
<h3><strong>Distros based on Arch (Arch Linux, Manjaro)</strong></h3>
<div class="contain-inline-size rounded-md border- border-token-border-medium relative bg-token-sidebar-surface-primary dark:bg-gray-950">
<div class="overflow-y-auto p-4" dir="ltr">Use the following steps:</div>
<div class="overflow-y-auto p-4" dir="ltr">
<pre contenteditable="false">sudo pacman -Syu rsync

rsync --version</pre>
<code class="!whitespace-pre hljs language-bash">
</code></div>
</div>
<p>If rsync 3.4.0 is not yet in the official Arch repositories, use the AUR (Arch User Repo) or you can also compile it from source like the other distros we have mentioned.</p>
<h3><strong>Distros based on SUSE (openSUSE, SLES)</strong></h3>
<p>You can update your system packages and update rsync:</p>
<pre contenteditable="false">sudo zypper refresh sudo zypper update rsync</pre>
<p>Check the version of rsync:</p>
<pre contenteditable="false">rsync --version</pre>
<p>Hopefully, this cheat sheet of update commands and building from source will help those looking to update their rsync environment.</p>]]></content:encoded>
						                            <category domain="https://www.virtualizationhowto.com/community/cybersecurity-forum/">Cybersecurity Forum</category>                        <dc:creator>Brandon Lee</dc:creator>
                        <guid isPermaLink="true">https://www.virtualizationhowto.com/community/cybersecurity-forum/stpes-to-patch-rsync-9-8-vulnerability-in-linux/#post-1120</guid>
                    </item>
							        </channel>
        </rss>
		