Alerts This Week
Warning Icon 1 1,102
Alerts This Week
Warning Icon 1 1,102

Fedora 43 Rsync Critical Denial of Service Vulnerability 2026-a04e445b3f

fedora
Calendar Grey June 25, 2026
Dist Fedora Esm H88
This advisory covers critical updates for rsync in Fedora 43 addressing multiple security issues.
New version 3.4.4 with multiple regression fixes

Summary

Rsync uses a reliable algorithm to bring remote and host files into

sync very quickly. Rsync is fast because it just sends the differences

in the files over the network instead of sending the complete

files. Rsync is often used as a very powerful mirroring process or

just as a more capable replacement for the rcp command. A technical

report which describes the rsync algorithm is included in this

package.

Update Information:

New version 3.4.4 with multiple regression fixes. This update also fixes the following CVEs: CVE-2026-29518 CVE-2026-43617 CVE-2026-43618 CVE-2026-43619 CVE-2026-43620 CVE-2026-45232

Change Log

* Mon Jun 8 2026 Michal Ruprich - 3.4.4-1 - New version 3.4.4 * Fri May 29 2026 Michal Ruprich - 3.4.3-1 - New version 3.4.3

References


[ 1 ] Bug #2463360 - rsync-3.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2463360 [ 2 ] Bug #2480388 - CVE-2026-45232 rsync: Rsync: Denial of Service via malformed HTTP proxy response [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480388 [ 3 ] Bug #2486185 - rsync-3.4.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2486185

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-a04e445b3f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: rsync
Product: Fedora 43
Version: 3.4.4
Release: 1.fc43
Summary: A program for synchronizing files over a network

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here