Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 527
Alerts This Week
Warning Icon 1 527

Mageia Rsync Important Symlink File Write Issue Vuln 2026-0265

mageia
Calendar Grey July 18, 2026
Scroller Mageia
Critical security update for Rsync on Mageia addressing multiple vulnerabilities including symlink-based file write issue.
Security update

Summary

Description: The updated package fixes security vulnerabilities: Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write. (CVE-2026-29518) Rsync < 3.4.3 Authorization Bypass via Hostname Resolution. (CVE-2026-43617) Rsync < 3.4.3 Integer Overflow Information Disclosure. (CVE-2026-43618) Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls. (CVE-2026-43619) Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files(). (CVE-2026-43620) Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy. (CVE-2026-45232)

References

- https://bugs.mageia.org/show_bug.cgi?id=35562

- https://www.openwall.com/lists/oss-security/2026/05/20/6

- https://lists.debian.org/debian-security-announce/2026/msg00193.html

- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/FBOANNVT2JXHE24DJ2WIYE2BNCWRGT24/

- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/4RPOIF6TVE233FKZN5TAC6XTNQ5WVFYL/

- https://www.openwall.com/lists/oss-security/2026/06/08/1

- https://ubuntu.com/security/notices/USN-8349-1

- https://ubuntu.com/security/notices/USN-8349-2

- https://www.cve.org/CVERecord?id=CVE-2026-29518

- https://www.cve.org/CVERecord?id=CVE-2026-43617

- https://www.cve.org/CVERecord?id=CVE-2026-43618

- https://www.cve.org/CVERecord?id=CVE-2026-43619

- https://www.cve.org/CVERecord?id=CVE-2026-43620

- https://www.cve.org/CVERecord?id=CVE-2026-45232

Topics%20covered

Topics Covered

security advisory DoS important rsync arbitrary file write Mageia

Resolution

SRPMS

- 10/core/rsync-3.4.1-4.1.mga10

- 9/core/rsync-3.2.7-1.5.mga9

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 18 Jul 2026
URL: https://advisories.mageia.org/MGASA-2026-0265.html
Type: security
CVE: CVE-2026-29518, CVE-2026-43617, CVE-2026-43618, CVE-2026-43619, CVE-2026-43620, CVE-2026-45232

Topics%20covered

Topics Covered

security advisory DoS important rsync arbitrary file write Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.