Описание
ELSA-2026-25172: rsync security update (IMPORTANT)
[3.1.2-12.0.5]
- Backport fix for CVE-2026-41035 [Orabug: 39542074]
[3.1.2-12.0.3]
- Fix CVE-2024-12087 [Orabug: 38771262]
[3.1.2-12.0.1]
- Back port fix for CVE-2024-12085 [Orabug: 37524229]
Обновленные пакеты
Oracle Linux 7
Oracle Linux x86_64
rsync
3.1.2-12.0.5.el7_9
Связанные CVE
Связанные уязвимости
In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable.
In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable.
In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable.
In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable.
In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted len ...