rpms/rsync
7
0
Fork 1
Code Issues Pull Requests Releases Activity
A program for synchronizing files over a network
29 Commits 14 Branches 68 Tags 640 KiB
Diff 100%
fce1547fc5
Go to file
Michal Ruprich fce1547fc5 Resolves: RHEL-169151 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling 
Backport fix for CVE-2026-41035 which corrects the count passed to qsort
of the xattr list in receive_xattr(). The bug uses a stale 'count'
variable instead of temp_xattr.count after extended attributes have been
added or removed during receive.

[CVE: cve-2026-41035]
Upstream patches:
 - bb0a8118c2
Resolves: RHEL-169151

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-05-07 12:23:07 +02:00
.fmf Resolves: #2081296 - Enable fmf tests in centos stream 2022-05-03 15:04:47 +02:00
.gitignore Resolves: RHEL-70265 - Rebase rsync to 3.2.5 2024-12-09 19:04:42 +01:00
ci.fmf Related: #2081296 - Adding ci.fmf for separation of testing results 2022-05-18 16:24:01 +02:00
gating.yaml Update plans 2025-10-09 10:18:08 +00:00
Makefile RHEL 9.0.0 Alpha bootstrap 2020-10-14 21:54:13 -07:00
plans.fmf Update plans 2025-10-09 10:18:08 +00:00
rpminspect.yaml Resolves: #2053198 - rsync segmentation fault 2022-04-26 08:31:05 +02:00
rsync-3.0.6-iconv-logging.patch RHEL 9.0.0 Alpha bootstrap 2020-10-14 21:54:13 -07:00
rsync-3.2.2-runtests.patch RHEL 9.0.0 Alpha bootstrap 2020-10-14 21:54:13 -07:00
rsync-3.2.3-filtering-rules.patch Resolves: RHEL-70265 - Rebase rsync to 3.2.5 2024-12-09 19:04:42 +01:00
rsync-3.2.5-cve-2024-12085.patch Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents 2025-01-30 10:01:16 +01:00
rsync-3.2.5-cve-2024-12087.patch Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents 2025-01-30 10:01:16 +01:00
rsync-3.2.5-cve-2024-12088.patch Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents 2025-01-30 10:01:16 +01:00
rsync-3.2.5-cve-2024-12747.patch Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents 2025-01-30 10:01:16 +01:00
rsync-3.2.5-cve-2025-10158.patch Resolves: RHEL-152536 - CVE-2025-10158 Out of bounds array access via negative index 2026-04-13 15:15:44 +02:00
rsync-3.2.5-cve-2026-41035.patch Resolves: RHEL-169151 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling 2026-05-07 12:23:07 +02:00
rsync-3.2.5-default-compression.patch Resolves: RHEL-70265 - Rebase rsync to 3.2.5 2025-02-05 10:33:59 +01:00
rsync-3.2.5-rrsync-man.patch Resolves: RHEL-70265 - Rebase rsync to 3.2.5 2024-12-09 19:04:42 +01:00
rsync-3.2.5-ssh-askpass.patch Resolves: RHEL-104404 - Do not clear DISPLAY unconditionally 2025-10-09 13:26:24 +02:00
rsync-man.patch RHEL 9.0.0 Alpha bootstrap 2020-10-14 21:54:13 -07:00
rsync-noatime.patch RHEL 9.0.0 Alpha bootstrap 2020-10-14 21:54:13 -07:00
rsync.spec Resolves: RHEL-169151 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling 2026-05-07 12:23:07 +02:00
rsyncd.conf RHEL 9.0.0 Alpha bootstrap 2020-10-14 21:54:13 -07:00
rsyncd.service RHEL 9.0.0 Alpha bootstrap 2020-10-14 21:54:13 -07:00
rsyncd.socket RHEL 9.0.0 Alpha bootstrap 2020-10-14 21:54:13 -07:00
rsyncd.sysconfig RHEL 9.0.0 Alpha bootstrap 2020-10-14 21:54:13 -07:00
rsyncd@.service RHEL 9.0.0 Alpha bootstrap 2020-10-14 21:54:13 -07:00
sources Resolves: RHEL-70265 - Rebase rsync to 3.2.5 2024-12-09 19:04:42 +01:00