Skip to main content
EPSS 0.2%top 95%

Red Hat Security Advisory: rsync security update

0
High
Published: 06/16/2026 (06/16/2026, 17:38:45 UTC)
Source: GCVE Database
Vendor/Project: Red Hat Product Security
Product: Red Hat

Description

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: rsync: Remote memory disclosure via integer overflow in compressed-token decoding (CVE-2026-43618) * rsync: TOCTOU symlink race condition allowing local privilege escalation in daemon mode without chroot. (CVE-2026-29518) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected software

Affected versions
>=8.0.0 <8.10.27>=9.0.0 <9.8.20Red HatRed Hat Enterprise LinuxRed Hat Enterprise Linux BaseOS (v. 8)srcrsync-0:3.1.3-27.el8_10.srcRed Hat Enterprise Linux AppStream (v. 9)Red Hat Enterprise Linux BaseOS (v. 9)s390x

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 08/14/2026, 22:51:05 UTC

Technical Analysis

The rsync utility in Red Hat Enterprise Linux 8 and 9 contains two security flaws. CVE-2026-43618 is a remote memory disclosure vulnerability caused by an integer overflow during compressed-token decoding, potentially exposing sensitive memory contents. CVE-2026-29518 is a TOCTOU symlink race condition in daemon mode without chroot that can be exploited for local privilege escalation. Red Hat has issued security advisories RHSA-2026:26408 and RHSA-2026:26410 providing updated rsync packages that fix these vulnerabilities across multiple architectures including x86_64, s390x, ppc64le, and aarch64. The advisories include detailed package versions and instructions for applying the updates.

Potential Impact

Successful exploitation of CVE-2026-43618 could lead to remote disclosure of memory contents, potentially exposing sensitive information. CVE-2026-29518 allows a local attacker to escalate privileges on systems running the rsync daemon in non-chroot mode by exploiting a symlink race condition. Both vulnerabilities pose significant risks to confidentiality and system integrity if left unpatched.

Mitigation Recommendations

Red Hat has released official security updates for rsync in Red Hat Enterprise Linux 8 and 9 that address these vulnerabilities. Users should apply the updates as described in Red Hat advisory RHSA-2026:26408 for RHEL 8 and RHSA-2026:26410 for RHEL 9. The advisories provide detailed package names and versions for all affected architectures. Applying these patches fully mitigates the vulnerabilities. No additional mitigation steps are indicated by the vendor.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Csaf Category
csaf_security_advisory
Csaf Version
2.0
Publisher
Red Hat Product Security
Advisory Id
RHSA-2026:26408
Cve Count
2
Additional Cves
["CVE-2026-43618"]
State
PUBLISHED

Threat ID: 6a3270570b89be68881d3b11

Added to database: 06/17/2026, 10:00:55 UTC

Last enriched: 08/14/2026, 22:51:05 UTC

Last updated: 09/15/2026, 22:01:33 UTC

Views: 114

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses