gpp_maybe Security update for rsync

SUSE-SLE-Module-Basesystem-15-SP6-2025-156

This update for rsync fixes the following issues: - CVE-2024-12084: heap buffer overflow in checksum parsing. (bsc#1234100) - CVE-2024-12085: leak of uninitialized stack data on the server leading to possible ASLR bypass. (bsc#1234101) - CVE-2024-12086: leak of a client machine's file contents through the processing of checksum data. (bsc#1234102) - CVE-2024-12087: arbitrary file overwrite possible on clients when symlink syncing is enabled. (bsc#1234103) - CVE-2024-12088: bypass of the --safe-links flag may allow the placement of unsafe symlinks in a client. (bsc#1234104) - CVE-2024-12747: race condition in rsync handling symbolic links (bsc#1235475)

Release Date

Jan 17 2025
References

Bugzilla: 1235475, 1234100, 1234101, 1234102, 1234103, 1234104, 1235895
CVEs: CVE-2024-12747, CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-2024-12088
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15.6 s390x

Packages

rsync
Versatile tool for fast incremental file transfer

3.2.7-150600.3.8.1 lock rpm lock src

Basesystem Module 15.6 ppc64le

Packages

rsync
Versatile tool for fast incremental file transfer

3.2.7-150600.3.8.1 lock rpm lock src

Basesystem Module 15.6 x86_64

Packages

rsync
Versatile tool for fast incremental file transfer

3.2.7-150600.3.8.1 lock rpm lock src

Basesystem Module 15.6 aarch64

Packages

rsync
Versatile tool for fast incremental file transfer

3.2.7-150600.3.8.1 lock rpm lock src