已开启
fix(cve): 修复 CVE-2026-43619 在 rsync 中的漏洞 #92
infra_team创建于 5月20日
fix(cve): 修复 CVE-2026-43619 在 rsync 中的漏洞 #92
已开启
共 2 个文件变更+2529-1
| @@ -1,6 +1,6 @@ | |||
| 1 | Name: rsync | 1 | Name: rsync |
| 2 | Version: 3.2.7 | 2 | Version: 3.2.7 |
| 3 | -Release: 9 | 3 | +Release: 10 |
| 4 | Summary: Fast incremental file transfer utility | 4 | Summary: Fast incremental file transfer utility |
| 5 | License: GPL-3.0-or-later | 5 | License: GPL-3.0-or-later |
| 6 | URL: http://rsync.samba.org/ | 6 | URL: http://rsync.samba.org/ |
| @@ -29,6 +29,7 @@ Patch6014: backport-Fix-FLAG_GOT_DIR_FLIST-collission-with-FLAG_HLINKED.pat | |||
| 29 | Patch6015: backport-CVE-2025-10158.patch | 29 | Patch6015: backport-CVE-2025-10158.patch |
| 30 | Patch6016: backport-CVE-2026-41035.patch | 30 | Patch6016: backport-CVE-2026-41035.patch |
| 31 | Patch6017: backport-CVE-2026-45232.patch | 31 | Patch6017: backport-CVE-2026-45232.patch |
| 32 | +Patch6018: backport-CVE-2026-43619.patch | ||
| 32 | 33 | ||
| 33 | BuildRequires: git gcc systemd libacl-devel libattr-devel autoconf popt-devel | 34 | BuildRequires: git gcc systemd libacl-devel libattr-devel autoconf popt-devel |
| 34 | BuildRequires: lz4-devel openssl-devel libzstd-devel | 35 | BuildRequires: lz4-devel openssl-devel libzstd-devel |
| @@ -103,6 +104,10 @@ install -D -m644 %{SOURCE5} %{buildroot}/%{_unitdir}/rsyncd@.service | |||
| 103 | %{_mandir}/man5/rsyncd.conf.5* | 104 | %{_mandir}/man5/rsyncd.conf.5* |
| 104 | 105 | ||
| 105 | %changelog | 106 | %changelog |
| 107 | +* Wed May 20 2026 infra_team <zhaiwenjie1@huawei.com> - 3.2.7-10 | ||
| 108 | +- fix CVE: CVE-2026-43619 | ||
| 109 | +- Backport 5 upstream commits to fix symlink-race TOCTOU vulnerabilities | ||
| 110 | + | ||
| 106 | * Wed May 20 2026 infra_team <zhaiwenjie1@huawei.com> - 3.2.7-9 | 111 | * Wed May 20 2026 infra_team <zhaiwenjie1@huawei.com> - 3.2.7-9 |
| 107 | - Fix CVE-2026-45232 | 112 | - Fix CVE-2026-45232 |
| 108 | 113 | ||