Описание
Security update for rsync
This update for rsync fixes the following issues:
- Fixed bwlimit=0 option broken by CVE-2024-12088 fix (bsc#1239649).
Список пакетов
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
rsync-3.1.3-3.28.1
Ссылки
- Link for SUSE-SU-2025:1330-1
- E-Mail link for SUSE-SU-2025:1330-1
- SUSE Security Ratings
- SUSE Bug 1239649
- SUSE CVE CVE-2024-12088 page
Описание
A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.
Затронутые продукты
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:rsync-3.1.3-3.28.1
Ссылки
- CVE-2024-12088
- SUSE Bug 1233760
- SUSE Bug 1234104