Summary
[3.1.3-27]
- Integer overflow in compressed-token decoding (CVE-2026-43618)
- Resolves: RHEL-174951
[3.1.3-26]
- Resolves: RHEL-174950 - CVE-2026-29518 - TOCTOU symlink race in
non-chrooted daemon modules
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | rsync | 0:3.1.3-27.el8_10 |
| Oracle Linux · 8 | rsync-daemon | 0:3.1.3-27.el8_10 |
Vulnerabilities 2
-
High 8.1
Rsync < 3.4.3 Integer Overflow Information Disclosure
Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signed counter is not checked for overflow, allowing a malicious sender to trigger an overflow that causes the receiver process to read and …
-
High 7.0
Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write
Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling that allows attackers to redirect file writes outside intended directories by replacing parent directory components with symbolic links. Attacke…