ELSA-2026-26332

ELSA-2026-26332 - rsync security, bug fix, and enhancement update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-16

Description

[3.4.4-1]
- Resolves: RHEL-181630 - Rebase rsync to version 3.4.4
- Resolves: RHEL-174929 - TOCTOU symlink race condition (CVE-2026-29518)
- Resolves: RHEL-174949 - Memory disclosure via int overflow (CVE-2026-43618)

[3.4.1-3]
- Resolves: RHEL-118549 - Do not clear DISPLAY unconditionally

Related CVEs

CVE-2026-29518

CVE-2026-43618

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	rsync-3.4.4-1.el10_2.src.rpm	69aa3e5367ddf3288b56c351424c178caf2decf3a16969c9e0eb3dba20d0dcbc	-	ol10_aarch64_appstream
	rsync-3.4.4-1.el10_2.src.rpm	69aa3e5367ddf3288b56c351424c178caf2decf3a16969c9e0eb3dba20d0dcbc	-	ol10_aarch64_baseos_latest
	rsync-3.4.4-1.el10_2.src.rpm	69aa3e5367ddf3288b56c351424c178caf2decf3a16969c9e0eb3dba20d0dcbc	-	ol10_aarch64_u2_baseos_patch
	rsync-3.4.4-1.el10_2.aarch64.rpm	4e4164073dca03486ea0aa6624077354395bcb162d36542bb305c150c2c9ec0f	-	ol10_aarch64_baseos_latest
	rsync-3.4.4-1.el10_2.aarch64.rpm	4e4164073dca03486ea0aa6624077354395bcb162d36542bb305c150c2c9ec0f	-	ol10_aarch64_u2_baseos_patch
	rsync-daemon-3.4.4-1.el10_2.noarch.rpm	0de93fbb93feb90da3a71edc7a2f272821dad5be5b3803499e6ac76c3d7687f0	-	ol10_aarch64_appstream
	rsync-rrsync-3.4.4-1.el10_2.noarch.rpm	b083834a7f938187d0961814ac84868bcc36cf5ffc4eca9e5cd043518f3b8001	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	rsync-3.4.4-1.el10_2.src.rpm	69aa3e5367ddf3288b56c351424c178caf2decf3a16969c9e0eb3dba20d0dcbc	-	ol10_x86_64_appstream
	rsync-3.4.4-1.el10_2.src.rpm	69aa3e5367ddf3288b56c351424c178caf2decf3a16969c9e0eb3dba20d0dcbc	-	ol10_x86_64_baseos_latest
	rsync-3.4.4-1.el10_2.src.rpm	69aa3e5367ddf3288b56c351424c178caf2decf3a16969c9e0eb3dba20d0dcbc	-	ol10_x86_64_u2_baseos_patch
	rsync-3.4.4-1.el10_2.x86_64.rpm	a532eac77e47167369711c5c6a0a10527bc58c355c845145236361498a4c229a	-	ol10_x86_64_baseos_latest
	rsync-3.4.4-1.el10_2.x86_64.rpm	a532eac77e47167369711c5c6a0a10527bc58c355c845145236361498a4c229a	-	ol10_x86_64_u2_baseos_patch
	rsync-daemon-3.4.4-1.el10_2.noarch.rpm	0de93fbb93feb90da3a71edc7a2f272821dad5be5b3803499e6ac76c3d7687f0	-	ol10_x86_64_appstream
	rsync-rrsync-3.4.4-1.el10_2.noarch.rpm	b083834a7f938187d0961814ac84868bcc36cf5ffc4eca9e5cd043518f3b8001	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team