gpp_maybe Security update for rsync

SUSE-SLE-Module-Basesystem-15-SP6-2025-118

This update for rsync fixes the following issues: NOTE: this update is broken and was retracted. New update will be published as followup update. - CVE-2024-12084: heap buffer overflow in checksum parsing. (bsc#1234100) - CVE-2024-12085: leak of uninitialized stack data on the server leading to possible ASLR bypass. (bsc#1234101) - CVE-2024-12086: leak of a client machine's file contents through the processing of checksum data. (bsc#1234102) - CVE-2024-12087: arbitrary file overwrite possible on clients when symlink syncing is enabled. (bsc#1234103) - CVE-2024-12088: bypass of the --safe-links flag may allow the placement of unsafe symlinks in a client. (bsc#1234104)

Release Date

Jan 15 2025
References

Bugzilla: 1234100, 1234101, 1234102, 1234103, 1234104
CVEs: CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-2024-12088
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15.6 s390x

Packages

rsync
Versatile tool for fast incremental file transfer

3.2.7-150600.3.4.1 lock rpm lock src

Basesystem Module 15.6 x86_64

Packages

rsync
Versatile tool for fast incremental file transfer

3.2.7-150600.3.4.1 lock rpm lock src

Basesystem Module 15.6 ppc64le

Packages

rsync
Versatile tool for fast incremental file transfer

3.2.7-150600.3.4.1 lock rpm lock src

Basesystem Module 15.6 aarch64

Packages

rsync
Versatile tool for fast incremental file transfer

3.2.7-150600.3.4.1 lock rpm lock src