Fedora alert FEDORA-2026-a04e445b3f (rsync)
| From: | updates--- via package-announce <package-announce@lists.fedoraproject.org> | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 43 Update: rsync-3.4.4-1.fc43 | |
| Date: | Fri, 26 Jun 2026 01:14:37 +0000 | |
| Message-ID: | <20260626011437.74C337FBF5@bastion01.rdu3.fedoraproject.org> | |
| Archive-link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-a04e445b3f 2026-06-26 01:14:26.672392+00:00 -------------------------------------------------------------------------------- Name : rsync Product : Fedora 43 Version : 3.4.4 Release : 1.fc43 URL : https://rsync.samba.org/ Summary : A program for synchronizing files over a network Description : Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable replacement for the rcp command. A technical report which describes the rsync algorithm is included in this package. -------------------------------------------------------------------------------- Update Information: New version 3.4.4 with multiple regression fixes. This update also fixes the following CVEs: CVE-2026-29518 CVE-2026-43617 CVE-2026-43618 CVE-2026-43619 CVE-2026-43620 CVE-2026-45232 -------------------------------------------------------------------------------- ChangeLog: * Mon Jun 8 2026 Michal Ruprich <mruprich@redhat.com> - 3.4.4-1 - New version 3.4.4 * Fri May 29 2026 Michal Ruprich <mruprich@redhat.com> - 3.4.3-1 - New version 3.4.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2463360 - rsync-3.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2463360 [ 2 ] Bug #2480388 - CVE-2026-45232 rsync: Rsync: Denial of Service via malformed HTTP proxy response [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2480388 [ 3 ] Bug #2486185 - rsync-3.4.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2486185 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-a04e445b3f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgr... All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-cond... List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-ann... Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new