Lucene search
+L

2499 matches found

Oracle linux
Oracle linux
added 5 days ago8 views

rsync security, bug fix, and enhancement update

3.4.4-1 - Resolves: RHEL-181630 - Rebase rsync to version 3.4.4 - Resolves: RHEL-174929 - TOCTOU symlink race condition CVE-2026-29518 - Resolves: RHEL-174949 - Memory disclosure via int overflow CVE-2026-43618 3.4.1-3 - Resolves: RHEL-118549 - Do not clear DISPLAY unconditionally...

8.1CVSS6.1AI score0.0078EPSS
Exploits0
OSV
OSV
added 2026/07/14 11:45 a.m.6 views

USN-8536-1 mariadb vulnerabilities

It was discovered that MariaDB did not properly validate parameters supplied by a joiner node during a State Snapshot Transfer using the mariabackup method. An attacker could possibly use this issue to execute arbitrary shell commands on the donor node. CVE-2026-44168 It was discovered that Maria...

10CVSS6.4AI score0.00998EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:0 a.m.10 views

EulerOS 2.0 SP10 : rsync (EulerOS-SA-2026-2669)

According to the versions of the rsync packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In rsync 3.0.1 through 3.4.1, receivexattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victi...

7.8CVSS6.2AI score0.00393EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:0 a.m.10 views

EulerOS 2.0 SP10 : rsync (EulerOS-SA-2026-2710)

According to the versions of the rsync packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In rsync 3.0.1 through 3.4.1, receivexattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victi...

7.8CVSS6.2AI score0.00393EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2026/07/10 9:29 p.m.6 views

CVE-2026-59996

A flaw was found in OpenSSH, a widely used tool for secure remote access. When a user attempts to copy files between two different remote systems using the scp command, the file might be incorrectly placed in a directory above the intended destination. This unintended file placement could lead to...

5.4CVSS6AI score0.00241EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2026/07/10 12:0 a.m.9 views

EulerOS 2.0 SP12 : rsync (EulerOS-SA-2026-2566)

According to the versions of the rsync packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signed counter is not checke...

8.1CVSS6.2AI score0.0078EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/10 12:0 a.m.15 views

EulerOS 2.0 SP12 : rsync (EulerOS-SA-2026-2626)

According to the versions of the rsync packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signed counter is not checke...

8.1CVSS6.2AI score0.0078EPSS
Exploits1References3
RedHat Linux
RedHat Linux
added 2026/07/09 8:3 a.m.10 views

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.17.55 bug fix and security update

Red Hat OpenShift Container Platform release 4.17.55 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

9.8CVSS6.9AI score0.93235EPSS
Exploits54References11
Tenable Nessus
Tenable Nessus
added 2026/07/09 12:0 a.m.10 views

Alibaba Cloud Linux 3 : 0184: rsync (ALINUX3-SA-2026:0184)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0184 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-29518: Rsync versions before 3.4....

8.1CVSS6.3AI score0.0078EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/07 12:0 a.m.10 views

MiracleLinux 9 : rsync-3.2.5-7.el9_8 (AXSA:2026-1207:06)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1207:06 advisory. rsync: rsync server leaks arbitrary client files CVE-2024-12086 rsync: Rsync: Use-after-free vulnerability in extended attribute handling...

7.8CVSS6.1AI score0.01792EPSS
Exploits2References3
RedHat Linux
RedHat Linux
added 2026/07/01 11:17 a.m.14 views

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.14.68 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.68 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

9.8CVSS6.9AI score0.03663EPSS
Exploits29References11
RedHat Linux
RedHat Linux
added 2026/06/30 2:42 p.m.10 views

mariadb: Arbitrary code execution via improper parameter validation during SST

A flaw was found in MariaDB server. During the State Snapshot Transfer SST process, a malicious joiner node could exploit improper parameter validation on the donor node. This vulnerability, specifically within the rsync SST method, allows the malicious joiner to execute arbitrary shell commands ...

9.1CVSS6.1AI score0.00654EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2026/06/30 1:11 p.m.9 views

mariadb: Arbitrary code execution via improper parameter validation during SST

A flaw was found in MariaDB server. During the State Snapshot Transfer SST process, a malicious joiner node could exploit improper parameter validation on the donor node. This vulnerability, specifically within the rsync SST method, allows the malicious joiner to execute arbitrary shell commands ...

9.1CVSS6.1AI score0.00654EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2026/06/30 11:22 a.m.10 views

mariadb: Arbitrary code execution via improper parameter validation during SST

A flaw was found in MariaDB server. During the State Snapshot Transfer SST process, a malicious joiner node could exploit improper parameter validation on the donor node. This vulnerability, specifically within the rsync SST method, allows the malicious joiner to execute arbitrary shell commands ...

9.1CVSS6.1AI score0.00654EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2026/06/30 12:0 a.m.11 views

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.3.1.10)

The version of AHV installed on the remote host is prior to 10.3.1.10 / AHV-10.3.1.10. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.3.1.10 advisory. - A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruptio...

9.8CVSS7.1AI score0.00767EPSS
Exploits4References9
Tenable Nessus
Tenable Nessus
added 2026/06/30 12:0 a.m.14 views

Oracle Linux 9 : rsync (ELSA-2026-19368)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19368 advisory. - Fix integer overflow in compressed-token decoding CVE-2026-43618 - Resolves: RHEL-174932 - Fix TOCTOU symlink race in daemon no-chroot mode...

8.1CVSS6.3AI score0.01792EPSS
Exploits2References3
RedHat Linux
RedHat Linux
added 2026/06/29 10:57 p.m.5 views

mariadb: Arbitrary code execution via improper parameter validation during SST

A flaw was found in MariaDB server. During the State Snapshot Transfer SST process, a malicious joiner node could exploit improper parameter validation on the donor node. This vulnerability, specifically within the rsync SST method, allows the malicious joiner to execute arbitrary shell commands ...

9.1CVSS6.1AI score0.00654EPSS
Exploits0References6
Oracle linux
Oracle linux
added 2026/06/29 12:0 a.m.5 views

rsync security update

3.2.5-7.2 - Fix integer overflow in compressed-token decoding CVE-2026-43618 - Resolves: RHEL-174932 3.2.5-7.1 - Fix TOCTOU symlink race in daemon no-chroot mode CVE-2026-29518 - Resolves: RHEL-174952 3.2.5-4 - Resolves: RHEL-104404 - Do not clear DISPLAY unconditionally...

7.8CVSS7.2AI score0.01792EPSS
Exploits2
Fedora
Fedora
added 2026/06/26 1:14 a.m.7 views

[SECURITY] Fedora 43 Update: rsync-3.4.4-1.fc43

Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable...

8.1CVSS5.8AI score0.0078EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/06/26 12:0 a.m.15 views

Fedora 43 : rsync (2026-a04e445b3f)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a04e445b3f advisory. New version 3.4.4 with multiple regression fixes. This update also fixes the following CVEs: CVE-2026-29518 CVE-2026-43617 CVE-2026-43618...

8.1CVSS5.9AI score0.0078EPSS
Exploits0References7
Rows per page
Query Builder