SUSE-SU-2026:2038-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:2038-1

Upstream

CVE (14)

Related

CVE (14)

Published

2026-05-21T13:33:41Z

Modified

2026-05-22T09:00:05Z

Summary

Security update for rsync

Details

This update for rsync fixes the following issues

CVE-2026-29518: Symlink-Race TOCTOU in Daemon (bsc#1264511).
CVE-2026-41035: Count of entries mismatch can lead to a use-after-free (bsc#1262223)
CVE-2026-43617: Authorization Bypass via Hostname Resolution (bsc#1264515).
CVE-2026-43618: Integer Overflow Information Disclosure (bsc#1264512).
CVE-2026-43619: Symlink Race Condition via Path-Based Syscalls (bsc#1264514).
CVE-2026-43620: Out-of-Bounds Array Read via recv_files() (bsc#1264513).
CVE-2026-45232: Off-by-one stack OOB write in HTTP CONNECT proxy response parsing (bsc#1265296).

References

Affected packages