ELSA-2026-17481

ELSA-2026-17481 - rsync security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-05-14

Description

[3.1.3-25]
- Resolves: RHEL-169141 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling

Related CVEs

CVE-2026-41035

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	rsync-3.1.3-25.el8_10.src.rpm	1877cf5f28d022b5bf8ab7418b0fc28a42a6ef60118c60d4c5b8c2fa7ee84876	-	ol8_aarch64_baseos_latest
	rsync-3.1.3-25.el8_10.src.rpm	1877cf5f28d022b5bf8ab7418b0fc28a42a6ef60118c60d4c5b8c2fa7ee84876	-	ol8_aarch64_u10_baseos_patch
	rsync-3.1.3-25.el8_10.aarch64.rpm	72a6945cd833793d979b36450d915445ba8e04fe1d12935b706393c4940c8196	-	ol8_aarch64_baseos_latest
	rsync-3.1.3-25.el8_10.aarch64.rpm	72a6945cd833793d979b36450d915445ba8e04fe1d12935b706393c4940c8196	-	ol8_aarch64_u10_baseos_patch
	rsync-daemon-3.1.3-25.el8_10.noarch.rpm	4304d338ed1379abd7f72b627717e2569d7dd4a0efb0baf4ebd4397beed2986e	-	ol8_aarch64_baseos_latest
	rsync-daemon-3.1.3-25.el8_10.noarch.rpm	4304d338ed1379abd7f72b627717e2569d7dd4a0efb0baf4ebd4397beed2986e	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	rsync-3.1.3-25.el8_10.src.rpm	1877cf5f28d022b5bf8ab7418b0fc28a42a6ef60118c60d4c5b8c2fa7ee84876	-	ol8_x86_64_baseos_latest
	rsync-3.1.3-25.el8_10.src.rpm	1877cf5f28d022b5bf8ab7418b0fc28a42a6ef60118c60d4c5b8c2fa7ee84876	-	ol8_x86_64_u10_baseos_patch
	rsync-3.1.3-25.el8_10.x86_64.rpm	446b5a3e763c52c808bf899b45ceeb6422fc352c88214625c29884e1d3b04d07	-	ol8_x86_64_baseos_latest
	rsync-3.1.3-25.el8_10.x86_64.rpm	446b5a3e763c52c808bf899b45ceeb6422fc352c88214625c29884e1d3b04d07	-	ol8_x86_64_u10_baseos_patch
	rsync-daemon-3.1.3-25.el8_10.noarch.rpm	4304d338ed1379abd7f72b627717e2569d7dd4a0efb0baf4ebd4397beed2986e	-	ol8_x86_64_baseos_latest
	rsync-daemon-3.1.3-25.el8_10.noarch.rpm	4304d338ed1379abd7f72b627717e2569d7dd4a0efb0baf4ebd4397beed2986e	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team