[CLSA-2025:1737464920] rsync: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2025-01-21 13:08:47 UTC
Description:
- CVE-2024-12088: fix path traversal vulnerability by properly verifying symbolic link destinations - CVE-2024-12085: fix issue with checksum length manipulation leading to uninitialized memory leak
Updated packages:
  • rsync-3.1.3-12.el8.tuxcare.els5.x86_64.rpm
    sha:d0f878693455088ea76b756d3e316a158ab7ece2545b1d7921f6c0b7a9f16cf9
  • rsync-daemon-3.1.3-12.el8.tuxcare.els5.noarch.rpm
    sha:ddb9cbba846cdcde237e8bb0883b117f188fec90c79f482686406d79926ad665
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.