Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

rsync-daemon-3.5.0-1.el10 RPM for noarch

From CentOS Stream 10 AppStream for ppc64le

Name: rsync-daemon Distribution: Koji Testing
Version: 3.5.0 Vendor: Koji
Release: 1.el10 Build date: Tue Oct 27 11:06:24 2026
Group: Unspecified Build host: c3126c7e16a2
Size: 663 Source RPM: rsync-3.5.0-1.el10.src.rpm
Packager: Koji
Url: https://rsync.samba.org/
Summary: Service for anonymous access to rsync
 
Rsync can be used to offer read only access to anonymous clients. This
package provides the anonymous rsync service.

Provides

Requires

License

GPL-3.0-or-later

Changelog

* Mon Oct 26 2026 Michal Ruprich <mruprich@redhat.com> - 3.5.0-1
  - Rebase of rsync to 3.5.0
  - Resolves: RHEL-245341 - Directory escape via TOCTOU race condition in rrsync (CVE-2026-53783)
  - Resolves: RHEL-247073 - Unauthorized File Access via Symlink Module Root (CVE-2026-53784)
  - Resolves: RHEL-244603 - Arbitrary file write via path traversal in --relative mode (CVE-2026-53785)
  - Resolves: RHEL-255139 - Arbitrary file deletion via malicious file list (CVE-2026-53789)
  - Resolves: RHEL-246092 - Command Injection via Multiple Code Paths (CVE-2026-53790)
  - Resolves: RHEL-246066 - Daemon IP Spoofing via PROXY Protocol Header (CVE-2026-53791)
  - Resolves: RHEL-246505 - Path Confinement Bypass in Chroot Mode (CVE-2026-53793)
  - Resolves: RHEL-246193 - Denial of Service via --max-alloc=0 logic error (CVE-2026-53794)
  - Resolves: RHEL-246168 - Arbitrary file write via --temp-dir or --link-dest options (CVE-2026-53795)
  - Resolves: RHEL-255049 - Arbitrary File Read via Symlink Following (CVE-2026-53802)
  - Resolves: RHEL-244720 - Local Privilege Escalation via Symlink Following (CVE-2026-53803)
  - Resolves: RHEL-246133 - Access Control Bypass via DNS Resolution Failure (CVE-2026-70452)
  - Resolves: RHEL-244805 - DoS via Algorithmic Complexity (CVE-2026-70453)
  - Resolves: RHEL-247289 - TLS Certificate Validation Bypass allows interception of encrypted sessions (CVE-2026-70454)
  - Resolves: RHEL-245248 - DoS via Zstandard compression thread exhaustion (CVE-2026-70455)
  - Resolves: RHEL-245190 - Heap Out-of-Bounds Write via crafted argument list (CVE-2026-70456)
  - Resolves: RHEL-255114 - Memory corruption via out-of-bounds write in size parsing (CVE-2026-70457)
  - Resolves: RHEL-246856 - Memory corruption via crafted file entries (CVE-2026-70458)
  - Resolves: RHEL-246837 - Path Traversal via --partial-dir/--backup-dir Symlink (CVE-2026-70460)
  - Resolves: RHEL-245315 - Information disclosure and denial of service via crafted files-from entry (CVE-2026-70461)
  - Resolves: RHEL-247145 - Authorization bypass via `auth users` directive parsing (CVE-2026-70463)
  - Resolves: RHEL-246962 - DoS via handshake stall (CVE-2026-70464)
* Mon Jun 22 2026 Michal Ruprich <mruprich@redhat.com> - 3.4.4-1
  - Resolves: RHEL-186589 - Rebase rsync to version 3.4.4
  - Resolves: RHEL-174931 - TOCTOU symlink race condition (CVE-2026-29518)
  - Resolves: RHEL-174947 - Memory disclosure via int overflow (CVE-2026-43618)
* Tue May 12 2026 Michal Ruprich <mruprich@redhat.com> - 3.4.1-6
  - Resolves: RHEL-172276 - Fix regression introduced with CVE-2024-12086 fix
* Tue Apr 28 2026 Michal Ruprich <mruprich@redhat.com> - 3.4.1-5
  - Resolves: RHEL-169137 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling
* Mon Apr 13 2026 Michal Ruprich <mruprich@redhat.com> - 3.4.1-4
  - Resolves: RHEL-152527 - CVE-2025-10158 Out of bounds array access via negative index
* Thu Oct 09 2025 Michal Ruprich <mruprich@redhat.com> - 3.4.1-3
  - Resolves: RHEL-118549 - Do not clear DISPLAY unconditionally
* Thu Jan 30 2025 Michal Ruprich <mruprich@redhat.com> - 3.4.1-2
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync
* Wed Jan 15 2025 Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
  - New version 3.4.1
  - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70203 - rsync server leaks arbitrary client files
  - Resolves: RHEL-72500 - Path traversal vulnerability in rsync
  - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync
* Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 3.3.0-6
  - Bump release for October 2024 mass rebuild:
    Resolves: RHEL-64018

Files

/etc/sysconfig/rsyncd
/usr/lib/systemd/system/rsyncd.service
/usr/lib/systemd/system/rsyncd.socket
/usr/lib/systemd/system/rsyncd@.service

Generated by rpm2html 1.8.1

Fabrice Bellet, Tue Nov 10 07:02:02 2026