Security update for rsync

This update for rsync fixes the following issues: CVE-2026-29518: Symlink-Race TOCTOU in Daemon bsc1264511. CVE-2026-43619: Symlink Race Condition via Path-Based Syscalls bsc1264514. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupda...

SUSE-SU-2026:3629-1 Security update for rsync

This update for rsync fixes the following issues: - CVE-2026-29518: Symlink-Race TOCTOU in Daemon bsc1264511. - CVE-2026-43619: Symlink Race Condition via Path-Based Syscalls bsc1264514...

[slackware-security] rsync

New rsync packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/rsync-3.5.0-i586-1slack15.0.txz: Upgraded. This update fixes bugs and security issues. For more information, see:...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the --filter process. An attacker can gain unauthorized access to files by injecting malicious merge file directives that override intended module-level filter restrictions. Remediation A fix was pushed into...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the rrsync process. An attacker can access or modify files outside the intended directory by substituting a symlink for a path component after validation but before transfer processing. Attackers may also leverage...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack in the chdir process when use chroot is disabled and the module root path or one of its components is a symlink. An attacker can gain unauthorized access to files outside the intended directory by exploiting symlink...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack through the traversal of the sender's source tree. An attacker can access files outside the intended transfer root by atomically replacing a parent directory component with a symlink pointing outside the source root betwe...

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index in the sender-side block matching process. An attacker can cause memory access before the start of an allocated buffer by sending a crafted checksum block with a length of zero, resulting in an...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the --temp-dir or --link-dest options. An attacker can overwrite arbitrary files on the system by specifying absolute paths that resolve outside the intended destination directory, allowing files to be written to...

CRLF Injection

Overview Affected versions of this package are vulnerable to CRLF Injection via the name-converter process for uid/gid mapping. An attacker can manipulate protocol messages by injecting newline characters into user or group names, causing the daemon to interpret attacker-controlled data as valid...

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation via the PROXY protocol header. An attacker can gain unauthorized access by sending a crafted header with a forged source IP address, thereby bypassing IP-based access controls. Remediation A fix was pushed into the...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack through the handling of the destination directory in the non-daemon receiver. An attacker can redirect file writes to unintended filesystem locations by manipulating parent components of the destination path and...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack in the handling of the /./ boundary marker in chroot mode. An attacker can gain unauthorized read or write access to files outside the intended directory by constructing specially crafted paths or forging delta-basis...

Reliance on Untrusted Inputs in a Security Decision

Overview Affected versions of this package are vulnerable to Reliance on Untrusted Inputs in a Security Decision via improper path handling in the file list process. An attacker can cause unauthorized file deletion outside the intended destination directory by sending a crafted file list that...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the handling of ancillary file writes such as --log-file, --write-batch, or daemon-mode log and statistics paths. An attacker can overwrite arbitrary files by placing a symlink at a predictable output path and...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack through the --remove-source-files process. An attacker can cause arbitrary file deletion by atomically replacing a source file with a symlink between the completion of a file transfer and the subsequent unlink operation...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via a race condition in the sender's directory scanning process. An attacker can access files outside the intended directory by manipulating symlinks between the lstat and opendir calls. Remediation A fix was pushed into...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the process of applying ACLs or extended attributes. An attacker can modify file permissions or attributes of unintended files by exploiting a timing window to substitute a symlink at a predictable destination path...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the hostname-based access control evaluation process. An attacker can gain unauthorized access to restricted file trees by inducing DNS resolution failures, causing the daemon to skip deny rules. Remediation ...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity through the hashsearch function. An attacker can exhaust CPU resources by sending a specially crafted file list that triggers worst-case quadratic-time behavior in hash lookups. Remediation A fix was...