CVE-2024-12084 affecting package rsync for versions less than 3.4.1-1

CVE-2024-12084 affecting package rsync for versions less than 3.4.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-12088 affecting package rsync for versions less than 3.4.1-1

CVE-2024-12088 affecting package rsync for versions less than 3.4.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-12086 affecting package rsync for versions less than 3.4.1-1

CVE-2024-12086 affecting package rsync for versions less than 3.4.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-12087 affecting package rsync for versions less than 3.4.1-1

CVE-2024-12087 affecting package rsync for versions less than 3.4.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-12087 affecting package rsync for versions less than 3.4.1-1

CVE-2024-12087 affecting package rsync for versions less than 3.4.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-12085 affecting package rsync for versions less than 3.4.1-1

CVE-2024-12085 affecting package rsync for versions less than 3.4.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-12747 affecting package rsync for versions less than 3.4.1-1

CVE-2024-12747 affecting package rsync for versions less than 3.4.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-12084 affecting package rsync for versions less than 3.4.1-1

CVE-2024-12084 affecting package rsync for versions less than 3.4.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-12086 affecting package rsync for versions less than 3.4.1-1

CVE-2024-12086 affecting package rsync for versions less than 3.4.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-12088 affecting package rsync for versions less than 3.4.1-1

CVE-2024-12088 affecting package rsync for versions less than 3.4.1-1. An upgraded version of the package is available that resolves this issue...

USN-7206-2: rsync regression

USN-7206-1 fixed vulnerabilities in rsync. The update introduced a regression in rsync. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Simon Scannell, Pedro Gallegos, and Jasiel Spelman discovered that rsync did not properly handle checksum lengths. ...

USN-7206-2 rsync regression

USN-7206-1 fixed vulnerabilities in rsync. The update introduced a regression in rsync. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Simon Scannell, Pedro Gallegos, and Jasiel Spelman discovered that rsync did not properly handle checksum lengths. ...

SUSE CVE-2024-12084

A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths s2length in the code. When MAXDIGESTLEN exceeds the fixed SUMLENGTH 16 bytes, an attacker can write out of bounds in the sum2 buffer...

SUSE CVE-2024-12085

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time...

SUSE CVE-2024-12086

A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare wi...

SUSE CVE-2024-12087

A path traversal vulnerability exists in rsync. It stems from behavior enabled by the --inc-recursive option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the --inc-recursive option, a lack of proper...

SUSE CVE-2024-12088

A flaw was found in rsync. When using the --safe-links option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the...

SUSE CVE-2024-12747

A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass...

[SECURITY] Fedora 40 Update: rsync-3.4.0-1.fc40

Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable...

rsync repository FORT Uncontrolled Resource Consumption Privilege Escalation

The vulnerability of the rsync repository in the FORT verifier is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...