Summary
[3.1.2-12.0.3]
- Fix CVE-2024-12087 [Orabug: 38771262]
[3.1.2-12.0.1]
* Back port fix for CVE-2024-12085 [Orabug: 37524229]
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | rsync | 0:3.1.2-12.0.3.el7_9 |
Vulnerabilities 1
-
Medium 6.5
Rsync: path traversal vulnerability in rsync
A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the `--i…