[CLSA-2026:1778236507] rsync: Fix of 3 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-05-08 10:35:12 UTC
Description:
- CVE-2025-10158: fix invalid access to files array in sender - CVE-2024-12747: fix symlink race condition in sender - CVE-2024-12086: fix server leak of arbitrary client files via crafted checksums and fuzzy basis
Updated packages:
  • rsync-3.2.3-19.el9.tuxcare.els4.x86_64.rpm
    sha:72160bb0c68868dd58d7e30bb03a03eff3b974b3ab33586324e7c22c9065f49e
  • rsync-daemon-3.2.3-19.el9.tuxcare.els4.noarch.rpm
    sha:7567e303808ea747c909c9b622fa0c95d9774e9d5b341002d5126e34e407e6c5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.