Packages / openSUSE Tumbleweed / Source / Productivity/Networking/Other / rsync

Source Package: rsync (3.4.3-2.3)

Versatile tool for fast incremental file transfer

The following binary packages are built from this source package:

rsync
Versatile tool for fast incremental file transfer

Vulnerabilità note

L’associazione dei pacchetti è in corso.

CVE	Gravità	Impatto per versione
[CVE-2026-44507] Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files. In versions prior to 3.4.3, when using a daemon configured with a chroot, the reverse DNS look	Medium(4.8)	Interessata Dettagli (1) `3.4.3-2.3` · x86_64 · tumbleweed Interessata · Corretta: `3.5.1-1.1` nvd · rsync · opensuse · tumbleweed
[CVE-2025-10158] rsync vulnerabilities	Medium(4.3)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 24, 2026, 8:34:15 AM UTC Dettagli (1) `3.4.3-2.3` · x86_64 · tumbleweed Corretta · Corretta: `3.4.1-4.1` usn · rsync · opensuse · tumbleweed
[CVE-2022-37434] klibc vulnerabilities	Critical(9.8)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 6:29:03 PM UTC Dettagli (1) `3.4.3-2.3` · x86_64 · tumbleweed Corretta · Corretta: `3.2.5-1.1` usn · rsync · opensuse · tumbleweed
[CVE-2022-29154] rsync: CVE-2022-29154	High(8.8)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 6:26:11 PM UTC Dettagli (1) `3.4.3-2.3` · x86_64 · tumbleweed Corretta · Corretta: `3.2.4-3.1` dsa · rsync · opensuse · tumbleweed
[CVE-2011-1097] rsync: CVE-2011-1097	Medium	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 5:05:20 PM UTC Dettagli (1) `3.4.3-2.3` · x86_64 · tumbleweed Corretta · Corretta: `3.1.2-1.5` dsa · rsync · opensuse · tumbleweed
[CVE-2007-4091] rsync: CVE-2007-4091	High	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 5:03:42 PM UTC Dettagli (1) `3.4.3-2.3` · x86_64 · tumbleweed Corretta · Corretta: `3.2.3-2.6` dsa · rsync · opensuse · tumbleweed

Versioni corrette e non interessate (2)

CVE	Gravità	Impatto per versione
[CVE-2026-29518] Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling that allows attackers to redirect file writes outside intended directories by replaci	High(7.8)	Corretta Dettagli (1) `3.4.3-2.3` · x86_64 · tumbleweed Corretta · Corretta: `3.4.3-1.1` nvd · rsync · opensuse · tumbleweed
[CVE-2026-41035] In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, m	High(7.4)	Corretta Dettagli (1) `3.4.3-2.3` · x86_64 · tumbleweed Corretta · Corretta: `3.4.1-5.1` nvd · rsync · opensuse · tumbleweed

Ultima sincronizzazione: Oct 24, 2026, 12:08:54 PM UTC

[Catalogo CVE]

Fonti

openSUSE Tumbleweed OSSSep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Repository-signature verification record
Signed object
https://download.opensuse.org/tumbleweed/repo/oss/repodata/repomd.xml
Signed-object SHA-256
4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Signer fingerprint
AD485664E901B867051AB15F35A2F86E29B700A4
Keyring revision
opensuse-project-signing-key.asc
SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable