7.4
High
CVE-2026-41035 In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a…
Description
In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| rsync 3.0 | 3.0.1 → 3.4.1 | No fix stated |
| Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) | Versions not published | |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Versions not published | |
| Red Hat OpenShift Container Platform 4.13 413.92 | earliest → < 413.92.202606160406-0 | 413.92.202606160406-0 |
| Red Hat OpenShift Container Platform 4.15 415.92 | earliest → < 415.92.202606030318-0 | 415.92.202606030318-0 |
| Red Hat OpenShift Container Platform 4.16 416.94 | earliest → < 416.94.202606051757-0 | 416.94.202606051757-0 |
| Red Hat OpenShift Container Platform 4.18 418.94 | earliest → < 418.94.202606051320-0 | 418.94.202606051320-0 |
| Red Hat OpenShift Container Platform 4.19 4.19 | earliest → < 4.19.9.6.202606031700-0 | 4.19.9.6.202606031700-0 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Versions not published |
Show the 41 other branches Hide the 41 other branches
References
- www.openwall.com www.openwall.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified