-
Mon Sep 07 2026 Michal Ruprich <mruprich@redhat.com> - 3.5.0-3
- Related: RHEL-246094 - O_PATH for directory travesal full fix
-
Tue Aug 25 2026 Michal Ruprich <mruprich@redhat.com> - 3.5.0-2
- Related: RHEL-246094 - O_PATH for directory traversal
-
Fri Aug 21 2026 Michal Ruprich <mruprich@redhat.com> - 3.5.0-1
- Resolves: RHEL-246094 - Rebase rsync to version 3.5.0 in RHEL10
- Resolves: RHEL-245337 - Directory escape via TOCTOU (CVE-2026-53783)
- Resolves: RHEL-244599 - Arbitrary file write (CVE-2026-53785)
- Resolves: RHEL-246095 - Command injection (CVE-2026-53790)
- Resolves: RHEL-246065 - Daemon IP spoofing (CVE-2026-53791)
- Resolves: RHEL-244718 - Local privilege escalation (CVE-2026-53803)
- Resolves: RHEL-244797 - DoS via algorithmic complexity (CVE-2026-70453)
- Resolves: RHEL-245247 - DoS via Zstandard compression (CVE-2026-70455)
- Resolves: RHEL-245188 - Heap out-of-bounds write (CVE-2026-70456)
- Resolves: RHEL-245313 - Information disclosure and DoS (CVE-2026-70461)
-
Fri Jun 12 2026 Michal Ruprich <mruprich@redhat.com> - 3.4.4-1
- Resolves: RHEL-181630 - Rebase rsync to version 3.4.4
- Resolves: RHEL-174929 - TOCTOU symlink race condition (CVE-2026-29518)
- Resolves: RHEL-174949 - Memory disclosure via int overflow (CVE-2026-43618)
-
Thu Oct 09 2025 Michal Ruprich <mruprich@redhat.com> - 3.4.1-3
- Resolves: RHEL-118549 - Do not clear DISPLAY unconditionally
-
Thu Jan 30 2025 Michal Ruprich <mruprich@redhat.com> - 3.4.1-2
- Resolves: RHEL-71293 - Build rsync with --with-rrsync
-
Wed Jan 15 2025 Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
- New version 3.4.1
- Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
- Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
- Resolves: RHEL-70203 - rsync server leaks arbitrary client files
- Resolves: RHEL-72500 - Path traversal vulnerability in rsync
- Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
- Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
- Resolves: RHEL-71293 - Build rsync with --with-rrsync
-
Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 3.3.0-6
- Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018
-
Thu Aug 15 2024 Michal Ruprich <mruprich@redhat.com> - 3.3.0-5
- Fixing a condition for BuildRequires on xxhash in RHEL
-
Thu Aug 01 2024 Michal Ruprich <mruprich@redhat.com> - 3.3.0-4
- Disabling xxhash because it is being removed from RHEL