ALT-PU-2025-16232-1
Package rsync updated to version 3.2.7-alt4 for branch sisyphus_riscv64.
Closed vulnerabilities
Published: 2025-11-27
BDU:2025-14729
Уязвимость функции f_name() утилиты для передачи и синхронизации файлов Rsync, позволяющая нарушителю вызвать отказ в обслуживании
Severity: MEDIUM (4.3)
Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Severity: MEDIUM (4.0)
Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N
References:
Published: 2025-11-18
Modified: 2025-11-19
Modified: 2025-11-19
CVE-2025-10158
A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue.
Severity: MEDIUM (4.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
References:
Closed bugs
Собран без поддержки IPv6
Собрать с поддержкой SIMD-roll