High ELSA-2025-0714 1 CVE

Important: rsync security update (Oracle Linux 7)

Published Feb 14, 2025 · Updated Feb 14, 2025

Ecosystem: Oracle Linux

Summary

[3.1.2-12.0.1]
* Back port fix for CVE-2024-12085 [Orabug: 37524229]

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	rsync	0:3.1.2-12.0.1.el7_9

Vulnerabilities 1

High 7.5

CVE-2024-12085 Public exploit

Rsync: info leak via uninitialized stack contents

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitializ…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux Alpine

Jan 14, 2025