Red Hat 製品エラータ RHSA-2025:0637 - Security Advisory
発行日:
2025-01-22
更新日:
2025-01-22

RHSA-2025:0637 - Security Advisory

概要

Important: rsync security update

タイプ/重大度

Security Advisory: Important

Red Hat Lightspeed パッチ分析

このアドバイザリーの影響を受けるシステムを特定し、修正します。

影響を受けるシステムの表示

トピック

An update for rsync is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

説明

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.

Security Fix(es):

  • rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解決策

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

影響を受ける製品

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x

修正

  • BZ - 2330539 - CVE-2024-12085 rsync: Info Leak via Uninitialized Stack Contents

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4

SRPM
rsync-3.2.3-19.el9_4.1.src.rpm SHA-256: 69915edf07dd867de712da7dcb172800e8ee4c42161c4103781a0ea51bfe4c08
x86_64
rsync-3.2.3-19.el9_4.1.x86_64.rpm SHA-256: 9202697f872c6bce4e3be7ed61eaa15fc48bf76673ce8f3a48fe94c414a5f783
rsync-daemon-3.2.3-19.el9_4.1.noarch.rpm SHA-256: 6cdb5553683ead2bd28c4cb784276dacc4b4fbe4b74515352d18e6f936e688af
rsync-debuginfo-3.2.3-19.el9_4.1.x86_64.rpm SHA-256: f84f3181e09f181a64df5919f11252b8d2788474d929da92bd1e88a729e98c59
rsync-debugsource-3.2.3-19.el9_4.1.x86_64.rpm SHA-256: 28da0637e626dc5bd0177dbeeb0e3ff6b96ddd6ec928fb8a7ce6581a61084188

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
rsync-3.2.3-19.el9_4.1.src.rpm SHA-256: 69915edf07dd867de712da7dcb172800e8ee4c42161c4103781a0ea51bfe4c08
x86_64
rsync-3.2.3-19.el9_4.1.x86_64.rpm SHA-256: 9202697f872c6bce4e3be7ed61eaa15fc48bf76673ce8f3a48fe94c414a5f783
rsync-daemon-3.2.3-19.el9_4.1.noarch.rpm SHA-256: 6cdb5553683ead2bd28c4cb784276dacc4b4fbe4b74515352d18e6f936e688af
rsync-debuginfo-3.2.3-19.el9_4.1.x86_64.rpm SHA-256: f84f3181e09f181a64df5919f11252b8d2788474d929da92bd1e88a729e98c59
rsync-debugsource-3.2.3-19.el9_4.1.x86_64.rpm SHA-256: 28da0637e626dc5bd0177dbeeb0e3ff6b96ddd6ec928fb8a7ce6581a61084188

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4

SRPM
rsync-3.2.3-19.el9_4.1.src.rpm SHA-256: 69915edf07dd867de712da7dcb172800e8ee4c42161c4103781a0ea51bfe4c08
s390x
rsync-3.2.3-19.el9_4.1.s390x.rpm SHA-256: 3d02ab18c9a53ae46815c9e719526b33265f104611c93e860dd9fbfc798f4177
rsync-daemon-3.2.3-19.el9_4.1.noarch.rpm SHA-256: 6cdb5553683ead2bd28c4cb784276dacc4b4fbe4b74515352d18e6f936e688af
rsync-debuginfo-3.2.3-19.el9_4.1.s390x.rpm SHA-256: 9c7615ea77bfd4bd7adfbf97ced9913554b87604c4f7ee68235868655aab6d50
rsync-debugsource-3.2.3-19.el9_4.1.s390x.rpm SHA-256: f8834b6120e16210fb1f4a694533808d3c78e6e88c3f8feba973482204c0850f

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4

SRPM
rsync-3.2.3-19.el9_4.1.src.rpm SHA-256: 69915edf07dd867de712da7dcb172800e8ee4c42161c4103781a0ea51bfe4c08
ppc64le
rsync-3.2.3-19.el9_4.1.ppc64le.rpm SHA-256: 520f85299dc07e9a7be7848153b7fab6e11fe8f00638e1b3398c55a5d2f48be9
rsync-daemon-3.2.3-19.el9_4.1.noarch.rpm SHA-256: 6cdb5553683ead2bd28c4cb784276dacc4b4fbe4b74515352d18e6f936e688af
rsync-debuginfo-3.2.3-19.el9_4.1.ppc64le.rpm SHA-256: 33d56819a7e7483d677461c7d15dacb12a2b77b90b48878739feeec921674ac6
rsync-debugsource-3.2.3-19.el9_4.1.ppc64le.rpm SHA-256: 6d2ebcf94ff8a4173519608cdd3b42b6130d348049e82edfc51583d376a61b5b

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4

SRPM
rsync-3.2.3-19.el9_4.1.src.rpm SHA-256: 69915edf07dd867de712da7dcb172800e8ee4c42161c4103781a0ea51bfe4c08
aarch64
rsync-3.2.3-19.el9_4.1.aarch64.rpm SHA-256: 86802e6f9fa68bcef00aabe04bcf601201292cf9bf79370992d11dbb853ddc1c
rsync-daemon-3.2.3-19.el9_4.1.noarch.rpm SHA-256: 6cdb5553683ead2bd28c4cb784276dacc4b4fbe4b74515352d18e6f936e688af
rsync-debuginfo-3.2.3-19.el9_4.1.aarch64.rpm SHA-256: 218bbdded3ce336fbff97fe2657a5d846a6c9a50452e83e34dbf4cd595250a2e
rsync-debugsource-3.2.3-19.el9_4.1.aarch64.rpm SHA-256: 16ba1475118e8c51dedc859f454935e9d290e10b7bcb79f3173367c7b2064fce

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
rsync-3.2.3-19.el9_4.1.src.rpm SHA-256: 69915edf07dd867de712da7dcb172800e8ee4c42161c4103781a0ea51bfe4c08
ppc64le
rsync-3.2.3-19.el9_4.1.ppc64le.rpm SHA-256: 520f85299dc07e9a7be7848153b7fab6e11fe8f00638e1b3398c55a5d2f48be9
rsync-daemon-3.2.3-19.el9_4.1.noarch.rpm SHA-256: 6cdb5553683ead2bd28c4cb784276dacc4b4fbe4b74515352d18e6f936e688af
rsync-debuginfo-3.2.3-19.el9_4.1.ppc64le.rpm SHA-256: 33d56819a7e7483d677461c7d15dacb12a2b77b90b48878739feeec921674ac6
rsync-debugsource-3.2.3-19.el9_4.1.ppc64le.rpm SHA-256: 6d2ebcf94ff8a4173519608cdd3b42b6130d348049e82edfc51583d376a61b5b

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
rsync-3.2.3-19.el9_4.1.src.rpm SHA-256: 69915edf07dd867de712da7dcb172800e8ee4c42161c4103781a0ea51bfe4c08
x86_64
rsync-3.2.3-19.el9_4.1.x86_64.rpm SHA-256: 9202697f872c6bce4e3be7ed61eaa15fc48bf76673ce8f3a48fe94c414a5f783
rsync-daemon-3.2.3-19.el9_4.1.noarch.rpm SHA-256: 6cdb5553683ead2bd28c4cb784276dacc4b4fbe4b74515352d18e6f936e688af
rsync-debuginfo-3.2.3-19.el9_4.1.x86_64.rpm SHA-256: f84f3181e09f181a64df5919f11252b8d2788474d929da92bd1e88a729e98c59
rsync-debugsource-3.2.3-19.el9_4.1.x86_64.rpm SHA-256: 28da0637e626dc5bd0177dbeeb0e3ff6b96ddd6ec928fb8a7ce6581a61084188

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
rsync-3.2.3-19.el9_4.1.src.rpm SHA-256: 69915edf07dd867de712da7dcb172800e8ee4c42161c4103781a0ea51bfe4c08
aarch64
rsync-3.2.3-19.el9_4.1.aarch64.rpm SHA-256: 86802e6f9fa68bcef00aabe04bcf601201292cf9bf79370992d11dbb853ddc1c
rsync-daemon-3.2.3-19.el9_4.1.noarch.rpm SHA-256: 6cdb5553683ead2bd28c4cb784276dacc4b4fbe4b74515352d18e6f936e688af
rsync-debuginfo-3.2.3-19.el9_4.1.aarch64.rpm SHA-256: 218bbdded3ce336fbff97fe2657a5d846a6c9a50452e83e34dbf4cd595250a2e
rsync-debugsource-3.2.3-19.el9_4.1.aarch64.rpm SHA-256: 16ba1475118e8c51dedc859f454935e9d290e10b7bcb79f3173367c7b2064fce

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
rsync-3.2.3-19.el9_4.1.src.rpm SHA-256: 69915edf07dd867de712da7dcb172800e8ee4c42161c4103781a0ea51bfe4c08
s390x
rsync-3.2.3-19.el9_4.1.s390x.rpm SHA-256: 3d02ab18c9a53ae46815c9e719526b33265f104611c93e860dd9fbfc798f4177
rsync-daemon-3.2.3-19.el9_4.1.noarch.rpm SHA-256: 6cdb5553683ead2bd28c4cb784276dacc4b4fbe4b74515352d18e6f936e688af
rsync-debuginfo-3.2.3-19.el9_4.1.s390x.rpm SHA-256: 9c7615ea77bfd4bd7adfbf97ced9913554b87604c4f7ee68235868655aab6d50
rsync-debugsource-3.2.3-19.el9_4.1.s390x.rpm SHA-256: f8834b6120e16210fb1f4a694533808d3c78e6e88c3f8feba973482204c0850f

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4

SRPM
rsync-3.2.3-19.el9_4.1.src.rpm SHA-256: 69915edf07dd867de712da7dcb172800e8ee4c42161c4103781a0ea51bfe4c08
x86_64
rsync-3.2.3-19.el9_4.1.x86_64.rpm SHA-256: 9202697f872c6bce4e3be7ed61eaa15fc48bf76673ce8f3a48fe94c414a5f783
rsync-daemon-3.2.3-19.el9_4.1.noarch.rpm SHA-256: 6cdb5553683ead2bd28c4cb784276dacc4b4fbe4b74515352d18e6f936e688af
rsync-debuginfo-3.2.3-19.el9_4.1.x86_64.rpm SHA-256: f84f3181e09f181a64df5919f11252b8d2788474d929da92bd1e88a729e98c59
rsync-debugsource-3.2.3-19.el9_4.1.x86_64.rpm SHA-256: 28da0637e626dc5bd0177dbeeb0e3ff6b96ddd6ec928fb8a7ce6581a61084188

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4

SRPM
rsync-3.2.3-19.el9_4.1.src.rpm SHA-256: 69915edf07dd867de712da7dcb172800e8ee4c42161c4103781a0ea51bfe4c08
aarch64
rsync-3.2.3-19.el9_4.1.aarch64.rpm SHA-256: 86802e6f9fa68bcef00aabe04bcf601201292cf9bf79370992d11dbb853ddc1c
rsync-daemon-3.2.3-19.el9_4.1.noarch.rpm SHA-256: 6cdb5553683ead2bd28c4cb784276dacc4b4fbe4b74515352d18e6f936e688af
rsync-debuginfo-3.2.3-19.el9_4.1.aarch64.rpm SHA-256: 218bbdded3ce336fbff97fe2657a5d846a6c9a50452e83e34dbf4cd595250a2e
rsync-debugsource-3.2.3-19.el9_4.1.aarch64.rpm SHA-256: 16ba1475118e8c51dedc859f454935e9d290e10b7bcb79f3173367c7b2064fce

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4

SRPM
rsync-3.2.3-19.el9_4.1.src.rpm SHA-256: 69915edf07dd867de712da7dcb172800e8ee4c42161c4103781a0ea51bfe4c08
ppc64le
rsync-3.2.3-19.el9_4.1.ppc64le.rpm SHA-256: 520f85299dc07e9a7be7848153b7fab6e11fe8f00638e1b3398c55a5d2f48be9
rsync-daemon-3.2.3-19.el9_4.1.noarch.rpm SHA-256: 6cdb5553683ead2bd28c4cb784276dacc4b4fbe4b74515352d18e6f936e688af
rsync-debuginfo-3.2.3-19.el9_4.1.ppc64le.rpm SHA-256: 33d56819a7e7483d677461c7d15dacb12a2b77b90b48878739feeec921674ac6
rsync-debugsource-3.2.3-19.el9_4.1.ppc64le.rpm SHA-256: 6d2ebcf94ff8a4173519608cdd3b42b6130d348049e82edfc51583d376a61b5b

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4

SRPM
rsync-3.2.3-19.el9_4.1.src.rpm SHA-256: 69915edf07dd867de712da7dcb172800e8ee4c42161c4103781a0ea51bfe4c08
s390x
rsync-3.2.3-19.el9_4.1.s390x.rpm SHA-256: 3d02ab18c9a53ae46815c9e719526b33265f104611c93e860dd9fbfc798f4177
rsync-daemon-3.2.3-19.el9_4.1.noarch.rpm SHA-256: 6cdb5553683ead2bd28c4cb784276dacc4b4fbe4b74515352d18e6f936e688af
rsync-debuginfo-3.2.3-19.el9_4.1.s390x.rpm SHA-256: 9c7615ea77bfd4bd7adfbf97ced9913554b87604c4f7ee68235868655aab6d50
rsync-debugsource-3.2.3-19.el9_4.1.s390x.rpm SHA-256: f8834b6120e16210fb1f4a694533808d3c78e6e88c3f8feba973482204c0850f

Red Hat のセキュリティーに関する連絡先は secalert@redhat.com です。 連絡先の詳細は https://access.redhat.com/security/team/contact/ をご覧ください。