Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

rsync-rrsync-3.2.7-1.el9 RPM for noarch

From CentOS Stream 9 AppStream for ppc64le

Name: rsync-rrsync Distribution: CentOS
Version: 3.2.7 Vendor: CentOS
Release: 1.el9 Build date: Mon Oct 26 16:49:32 2026
Group: Unspecified Build host: aarch64-05.stream.rdu2.redhat.com
Size: 46084 Source RPM: rsync-3.2.7-1.el9.src.rpm
Packager: builder@centos.org
Url: https://rsync.samba.org/
Summary: A script to setup restricted rsync users via ssh logins
 
This subpackage provides rrsync script and its manpage. rrsync
may be used to setup a restricted rsync users via ssh logins.

Provides

Requires

License

GPLv3+

Changelog

* Mon Oct 26 2026 Michal Ruprich <mruprich@redhat.com> - 3.2.7-1
  - Rebase rsync to version 3.2.7 in RHEL9
  - Resolves: RHEL-245349 - Directory escape via TOCTOU race condition in rrsync (CVE-2026-53783)
  - Resolves: RHEL-247077 - Unauthorized File Access via Symlink Module Root (CVE-2026-53784)
  - Resolves: RHEL-244614 - Arbitrary file write via path traversal in --relative mode (CVE-2026-53785)
  - Resolves: RHEL-255150 - Arbitrary file deletion via malicious file list (CVE-2026-53789)
  - Resolves: RHEL-246100 - Command Injection via Multiple Code Paths (CVE-2026-53790)
  - Resolves: RHEL-246063 - Daemon IP Spoofing via PROXY Protocol Header (CVE-2026-53791)
  - Resolves: RHEL-246513 - Path Confinement Bypass in Chroot Mode (CVE-2026-53793)
  - Resolves: RHEL-246203 - DoS via --max-alloc=0 logic error (CVE-2026-53794)
  - Resolves: RHEL-246175 - Arbitrary file write via --temp-dir or --link-dest options (CVE-2026-53795)
  - Resolves: RHEL-255073 - Arbitrary File Read via Symlink Following (CVE-2026-53802)
  - Resolves: RHEL-244726 - Local Privilege Escalation via Symlink Following (CVE-2026-53803)
  - Resolves: RHEL-246149 - Access Control Bypass via DNS Resolution Failure (CVE-2026-70452)
  - Resolves: RHEL-244794 - DoS via Algorithmic Complexity (CVE-2026-70453)
  - Resolves: RHEL-247293 - TLS Cert Validation Bypass allows interception of encrypted sessions (CVE-2026-70454)
  - Resolves: RHEL-245207 - Heap Out-of-Bounds Write via crafted argument list (CVE-2026-70456)
  - Resolves: RHEL-255118 - Memory corruption via out-of-bounds write in size parsing (CVE-2026-70457)
  - Resolves: RHEL-246865 - Memory corruption via crafted file entries (CVE-2026-70458)
  - Resolves: RHEL-246843 - Path Traversal via --partial-dir/--backup-dir Symlink (CVE-2026-70460)
  - Resolves: RHEL-245324 - Information disclosure and denial of service via crafted files-from entry (CVE-2026-70461)
  - Resolves: RHEL-247133 - Authorization bypass via `auth users` directive parsing (CVE-2026-70463)
  - Resolves: RHEL-246963 - DoS via handshake stall (CVE-2026-70464)
* Tue Jun 23 2026 Michal Ruprich <mruprich@redhat.com> - 3.2.5-9
  - Fix integer overflow in compressed-token decoding (CVE-2026-43618)
  - Resolves: RHEL-174939
* Tue Jun 23 2026 Michal Ruprich <mruprich@redhat.com> - 3.2.5-8
  - Fix TOCTOU symlink race in daemon no-chroot mode (CVE-2026-29518)
  - Resolves: RHEL-174953
* Mon May 11 2026 Michal Ruprich <mruprich@redhat.com> - 3.2.5-7
  - Resolves: RHEL-173468 - CVE-2024-12086 rsync server leaks arbitrary client files
* Mon May 04 2026 Michal Ruprich <mruprich@redhat.com> - 3.2.5-6
  - Resolves: RHEL-169151 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling
* Tue Apr 07 2026 Michal Ruprich <mruprich@redhat.com> - 3.2.5-5
  - Resolves: RHEL-152536 - CVE-2025-10158 Out of bounds array access via negative index
* Thu Oct 09 2025 Michal Ruprich <mruprich@redhat.com> - 3.2.5-4
  - Resolves: RHEL-104404 - Do not clear DISPLAY unconditionally
* Wed Feb 05 2025 Michal Ruprich <mruprich@redhat.com> - 3.2.5-3
  - Resolves: RHEL-70265 - Rebase rsync to 3.2.5
* Wed Jan 29 2025 Michal Ruprich <mruprich@redhat.com> - 3.2.5-2
  - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70208 - Path traversal vulnerability in rsync
  - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links
* Mon Dec 09 2024 Michal Ruprich <mruprich@redhat.com> - 3.2.3-21
  - Resolves: RHEL-70265 - Rebase rsync to 3.2.5
  - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices
  - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps.
  - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure

Files

/usr/bin/rrsync
/usr/share/man/man1/rrsync.1.gz

Generated by rpm2html 1.8.1

Fabrice Bellet, Wed Nov 4 08:45:08 2026