ELSA-2026-67463-0
- ULN >
- Oracle Linux Errata repository >
- ELSA-2026-67463-0
ELSA-2026-67463-0 - rsync security, bug fix, and enhancement update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-09-16 |
Description
[3.5.0-3]
- Related: RHEL-246094 - O_PATH for directory travesal full fix
[3.5.0-2]
- Related: RHEL-246094 - O_PATH for directory traversal
[3.5.0-1]
- Resolves: RHEL-246094 - Rebase rsync to version 3.5.0 in RHEL10
- Resolves: RHEL-245337 - Directory escape via TOCTOU (CVE-2026-53783)
- Resolves: RHEL-244599 - Arbitrary file write (CVE-2026-53785)
- Resolves: RHEL-246095 - Command injection (CVE-2026-53790)
- Resolves: RHEL-246065 - Daemon IP spoofing (CVE-2026-53791)
- Resolves: RHEL-244718 - Local privilege escalation (CVE-2026-53803)
- Resolves: RHEL-244797 - DoS via algorithmic complexity (CVE-2026-70453)
- Resolves: RHEL-245247 - DoS via Zstandard compression (CVE-2026-70455)
- Resolves: RHEL-245188 - Heap out-of-bounds write (CVE-2026-70456)
- Resolves: RHEL-245313 - Information disclosure and DoS (CVE-2026-70461)
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
| Oracle Linux 10 (aarch64) | rsync-3.5.0-3.el10_2.src.rpm | 8ce49d19a21fff312f2fcc0ef44e0727e70b324b7a1aaf9128eeb1dd247e5d1b | - | ol10_aarch64_appstream |
| rsync-3.5.0-3.el10_2.src.rpm | 8ce49d19a21fff312f2fcc0ef44e0727e70b324b7a1aaf9128eeb1dd247e5d1b | - | ol10_aarch64_baseos_latest | |
| rsync-3.5.0-3.el10_2.src.rpm | 8ce49d19a21fff312f2fcc0ef44e0727e70b324b7a1aaf9128eeb1dd247e5d1b | - | ol10_aarch64_u2_baseos_patch | |
| rsync-3.5.0-3.el10_2.aarch64.rpm | af76ddba34d103b453d8c98f282bf4339c4e9ca1efa9f18e87335a9e3b93bab5 | - | ol10_aarch64_baseos_latest | |
| rsync-3.5.0-3.el10_2.aarch64.rpm | af76ddba34d103b453d8c98f282bf4339c4e9ca1efa9f18e87335a9e3b93bab5 | - | ol10_aarch64_u2_baseos_patch | |
| rsync-daemon-3.5.0-3.el10_2.noarch.rpm | e92ed400b80c36b93f17f300d8e027ab1e3cb41163cd1d212053806e208adbe9 | - | ol10_aarch64_appstream | |
| rsync-rrsync-3.5.0-3.el10_2.noarch.rpm | baef545a02d816b0ff7bf44927622eb4781b42e9407cec1a72ca1b32549d4cfe | - | ol10_aarch64_appstream | |
| Oracle Linux 10 (x86_64) | rsync-3.5.0-3.el10_2.src.rpm | 8ce49d19a21fff312f2fcc0ef44e0727e70b324b7a1aaf9128eeb1dd247e5d1b | - | ol10_x86_64_appstream |
| rsync-3.5.0-3.el10_2.src.rpm | 8ce49d19a21fff312f2fcc0ef44e0727e70b324b7a1aaf9128eeb1dd247e5d1b | - | ol10_x86_64_baseos_latest | |
| rsync-3.5.0-3.el10_2.src.rpm | 8ce49d19a21fff312f2fcc0ef44e0727e70b324b7a1aaf9128eeb1dd247e5d1b | - | ol10_x86_64_u2_baseos_patch | |
| rsync-3.5.0-3.el10_2.x86_64.rpm | c9a8d182a21bc2d0b4823f9b66b7fe88ed9427c3e3ef266d84552279f5c3b3d0 | - | ol10_x86_64_baseos_latest | |
| rsync-3.5.0-3.el10_2.x86_64.rpm | c9a8d182a21bc2d0b4823f9b66b7fe88ed9427c3e3ef266d84552279f5c3b3d0 | - | ol10_x86_64_u2_baseos_patch | |
| rsync-daemon-3.5.0-3.el10_2.noarch.rpm | e92ed400b80c36b93f17f300d8e027ab1e3cb41163cd1d212053806e208adbe9 | - | ol10_x86_64_appstream | |
| rsync-rrsync-3.5.0-3.el10_2.noarch.rpm | baef545a02d816b0ff7bf44927622eb4781b42e9407cec1a72ca1b32549d4cfe | - | ol10_x86_64_appstream | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
