Red Hat Security Advisory

RHSA-2024:0254

rsync security update

Released 2024-01-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS EUS (v.8.6) rsync-3.1.3-14.el8_6.5, rsync-daemon-3.1.3-14.el8_6.5

TI-2022-17498 CVE-2022-37434 · GHSA-cfmr-vrgj-vqwv

HIGH 75

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.19243 Published 2022-08-05 Partial fix CWE-120