Описание
Security update for rsync
This update for rsync fixes the following issues:
- CVE-2026-29518: Symlink-Race TOCTOU in Daemon (bsc#1264511).
- CVE-2026-43619: Symlink Race Condition via Path-Based Syscalls (bsc#1264514).
Список пакетов
SUSE Linux Enterprise Server 12 SP5-LTSS
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
Ссылки
- Link for SUSE-SU-2026:3629-1
- E-Mail link for SUSE-SU-2026:3629-1
- SUSE Security Ratings
- SUSE Bug 1264511
- SUSE Bug 1264514
- SUSE CVE CVE-2026-29518 page
- SUSE CVE CVE-2026-43619 page
Описание
Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling that allows attackers to redirect file writes outside intended directories by replacing parent directory components with symbolic links. Attackers with write access to a module path can exploit this race condition to create or overwrite arbitrary files, potentially modifying sensitive system files and achieving privilege escalation when the daemon runs with elevated privileges. This vulnerability can only be triggered if the chroot setting is false.
Затронутые продукты
Ссылки
- CVE-2026-29518
- SUSE Bug 1264511
- SUSE Bug 1264514
- SUSE Bug 1269055
- SUSE Bug 1269056
- SUSE Bug 1269057
Описание
Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system calls including chmod, lchown, utimes, rename, unlink, mkdir, symlink, mknod, link, rmdir, and lstat that allow local attackers to redirect operations to files outside the exported rsync module. Attackers with local filesystem access can exploit the timing window between path resolution and syscall execution by swapping symlinks to apply sender-supplied permissions, ownership, timestamps, or filenames to arbitrary files outside the intended module boundary on rsync daemons configured with 'use chroot = no'.
Затронутые продукты
Ссылки
- CVE-2026-43619
- SUSE Bug 1264514
- SUSE Bug 1269053