gpp_maybe Security update for rsync

SUSE-SL-Micro-6.2-867

This update for rsync fixes the following issues - CVE-2025-10158: Out of bounds array access via negative index (bsc#1254441). - CVE-2026-29518: Symlink-Race TOCTOU in Daemon (use chroot = no) (bsc#1264511). - CVE-2026-41035: count of entries mismatch can lead to a use-after-free (bsc#1262223). - CVE-2026-43617: Authorization Bypass via Hostname Resolution (bsc#1264515). - CVE-2026-43618: Integer Overflow Information Disclosure (bsc#1264512). - CVE-2026-43619: Symlink Race Condition via Path-Based Syscalls (bsc#1264514). - CVE-2026-43620: Out-of-Bounds Array Read via recv_files() (bsc#1264513). - CVE-2026-45232: Off-by-one stack OOB write in HTTP CONNECT proxy response parsing (bsc#1265296).

Release Date

Jun 2 2026
References

Bugzilla: 1254441, 1262223, 1264511, 1264512, 1264513, 1264514, 1264515, 1265296
CVEs: CVE-2025-10158, CVE-2026-29518, CVE-2026-41035, CVE-2026-43617, CVE-2026-43618, CVE-2026-43619, CVE-2026-43620, CVE-2026-45232
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Micro 6.2 ppc64le

Packages

rsync
Versatile tool for fast incremental file transfer

3.4.1-160000.4.1 lock rpm

SUSE Linux Micro 6.2 s390x

Packages

rsync
Versatile tool for fast incremental file transfer

3.4.1-160000.4.1 lock rpm

SUSE Linux Micro 6.2 x86_64

Packages

rsync
Versatile tool for fast incremental file transfer

3.4.1-160000.4.1 lock rpm

SUSE Linux Micro 6.2 aarch64

Packages

rsync
Versatile tool for fast incremental file transfer

3.4.1-160000.4.1 lock rpm