rsync-3.1.3-24.el8_10
エラータID: AXSA:2026-406:02
リリース日:
2026/04/06 Monday - 16:46
題名:
rsync-3.1.3-24.el8_10
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
Moderate
Description:
以下項目について対処しました。
[Security Fix]
- rsync には、配列の範囲外アクセスの問題があるため、リモートの
攻撃者により、データ破壊を可能とする脆弱性が存在します。
(CVE-2025-10158)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2025-10158
A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue.
A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue.
追加情報:
N/A
ダウンロード:
SRPMS
- rsync-3.1.3-24.el8_10.src.rpm
MD5: 6e00f849e73297b9e9638e06cca48bc1
SHA-256: a4cb2447e23907b62291cbd0658a953a2916bf1a6384348063fa6b27731a5d2f
Size: 1.10 MB
Asianux Server 8 for x86_64
- rsync-3.1.3-24.el8_10.x86_64.rpm
MD5: 4244f667a67f7774b2f309caaad665d1
SHA-256: d0e9fd955517160bca0a7f1fe2a4b8ec6066a230a42ae9a01346f7fd2b219b48
Size: 411.39 kB - rsync-daemon-3.1.3-24.el8_10.noarch.rpm
MD5: f38a507d02582fef718a3822618c4288
SHA-256: 08f966b03b96b52f1058c874b25061dbebe58d48ad0949bfd76e6e6efd2ca6e1
Size: 44.03 kB
English