An update for rsync is now available for openEuler-24.03-LTS-SP3 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-4753 Final 1.0 1.0 2026-11-11 Initial 2026-11-11 2026-11-11 openEuler SA Tool V1.0 2026-11-11 rsync security update An update for rsync is now available for openEuler-24.03-LTS-SP3 Rsync is an open source utility that provides fast incremental file transfer. It uses the "rsync algorithm" which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files are present at one of the ends of the link beforehand. Security Fix(es): Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling that allows attackers to redirect file writes outside intended directories by replacing parent directory components with symbolic links. Attackers with write access to a module path can exploit this race condition to create or overwrite arbitrary files, potentially modifying sensitive system files and achieving privilege escalation when the daemon runs with elevated privileges. This vulnerability can only be triggered if the chroot setting is false.(CVE-2026-29518) Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list enforcement when configured with chroot. Attackers can bypass hostname-based deny rules by controlling the PTR record for their source IP address, allowing connections from hostnames that administrators intended to deny when reverse DNS resolution fails and defaults to UNKNOWN.(CVE-2026-43617) An update for rsync is now available for master/openEuler-20.03-LTS-SP4/openEuler-22.03-LTS-SP4/openEuler-24.03-LTS/openEuler-24.03-LTS-Next/openEuler-24.03-LTS-SP1/openEuler-24.03-LTS-SP3/openEuler-24.03-LTS-SP4. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High rsync https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4753 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-29518 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-43617 https://nvd.nist.gov/vuln/detail/CVE-2026-29518 https://nvd.nist.gov/vuln/detail/CVE-2026-43617 openEuler-24.03-LTS-SP3 rsync-3.2.7-13.oe2403sp3.aarch64.rpm rsync-debuginfo-3.2.7-13.oe2403sp3.aarch64.rpm rsync-debugsource-3.2.7-13.oe2403sp3.aarch64.rpm rsync-help-3.2.7-13.oe2403sp3.aarch64.rpm rsync-3.2.7-13.oe2403sp3.src.rpm rsync-3.2.7-13.oe2403sp3.x86_64.rpm rsync-debuginfo-3.2.7-13.oe2403sp3.x86_64.rpm rsync-debugsource-3.2.7-13.oe2403sp3.x86_64.rpm rsync-help-3.2.7-13.oe2403sp3.x86_64.rpm Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling that allows attackers to redirect file writes outside intended directories by replacing parent directory components with symbolic links. Attackers with write access to a module path can exploit this race condition to create or overwrite arbitrary files, potentially modifying sensitive system files and achieving privilege escalation when the daemon runs with elevated privileges. This vulnerability can only be triggered if the chroot setting is false. 2026-11-11 CVE-2026-29518 openEuler-24.03-LTS-SP3 High 7.0 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H rsync security update 2026-11-11 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4753 Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list enforcement when configured with chroot. Attackers can bypass hostname-based deny rules by controlling the PTR record for their source IP address, allowing connections from hostnames that administrators intended to deny when reverse DNS resolution fails and defaults to UNKNOWN. 2026-11-11 CVE-2026-43617 openEuler-24.03-LTS-SP3 Medium 4.8 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N rsync security update 2026-11-11 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4753