Actual Version of rsync (CVE-2024-12084)

General Discussion & Chat
1

On my AlmaLinux 5.14.0-503.23 system there ist still a rsync tool with version 3.2.3; isn’t it required to be 3.4.1 for security reasons ( CVE-2024-12084) now?

2

See cve-details

Besides, the rsync version is not “3.2.3”. It is “3.2.3-20.1”.

$ rpm -q rsync
rsync-3.2.3-20.el9_5.1.x86_64

$ rpm -q --changelog rsync
* Fri Jan 03 2025 Michal Ruprich <mruprich@redhat.com> - 3.2.3-20.1
- Resolves: RHEL-72495 - Info Leak via Uninitialized Stack Contents

* Thu Oct 19 2023 Alex Iribarren <Alex.Iribarren@cern.ch> - 3.2.3-20
- Resolves: RHEL-14228 - rsync regression with --delay-updates