Red Hat Product Errata RHSA-2026:26332 - Security Advisory Issued: 2026-06-16 Updated: 2026-06-16 RHSA-2026:26332 - Security Advisory Overview Updated Packages Synopsis Important: rsync security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for rsync is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): rsync: rsync: Remote memory disclosure via integer overflow in compressed-token decoding (CVE-2026-43618) rsync: TOCTOU symlink race condition allowing local privilege escalation in daemon mode without chroot. (CVE-2026-29518) Bug Fix(es) and Enhancement(s): Rebase rsync to version 3.4.4 in RHEL10 (JIRA:RHEL-181630) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2469054 - CVE-2026-43618 rsync: rsync: Remote memory disclosure via integer overflow in compressed-token decoding BZ - 2469055 - CVE-2026-29518 rsync: TOCTOU symlink race condition allowing local privilege escalation in daemon mode without chroot. RHEL-181630 - Rebase rsync to version 3.4.4 in RHEL10 CVEs CVE-2026-29518 CVE-2026-43618 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM rsync-3.4.4-1.el10_2.src.rpm SHA-256: 1cce801926a1ca7a75520ae0ec1b238d657d0e744bb6e6cc928b320781639b94 x86_64 rsync-3.4.4-1.el10_2.x86_64.rpm SHA-256: b91fd5a05ad72423e2a99535f53ac875aa1f7a4f3c7d4193cac8ee03c0464d26 rsync-daemon-3.4.4-1.el10_2.noarch.rpm SHA-256: 585546e1d4e41b6eba4878065ae678974baa1a5833f8256080b97e2d9055f0da rsync-debuginfo-3.4.4-1.el10_2.x86_64.rpm SHA-256: 6d19706cfad035232725bcbf02a1c4abf47e24e6ca8d23e81105034914127c76 rsync-debugsource-3.4.4-1.el10_2.x86_64.rpm SHA-256: 0ec6aa5710fd992103ffdc3bc07d819eb7149c25967aa5067bb5906fc813f241 rsync-rrsync-3.4.4-1.el10_2.noarch.rpm SHA-256: e2b747f3f2980880268f569b6d16f30daeda805f34fc83ba40f16febed141a87 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM rsync-3.4.4-1.el10_2.src.rpm SHA-256: 1cce801926a1ca7a75520ae0ec1b238d657d0e744bb6e6cc928b320781639b94 x86_64 rsync-3.4.4-1.el10_2.x86_64.rpm SHA-256: b91fd5a05ad72423e2a99535f53ac875aa1f7a4f3c7d4193cac8ee03c0464d26 rsync-daemon-3.4.4-1.el10_2.noarch.rpm SHA-256: 585546e1d4e41b6eba4878065ae678974baa1a5833f8256080b97e2d9055f0da rsync-debuginfo-3.4.4-1.el10_2.x86_64.rpm SHA-256: 6d19706cfad035232725bcbf02a1c4abf47e24e6ca8d23e81105034914127c76 rsync-debugsource-3.4.4-1.el10_2.x86_64.rpm SHA-256: 0ec6aa5710fd992103ffdc3bc07d819eb7149c25967aa5067bb5906fc813f241 rsync-rrsync-3.4.4-1.el10_2.noarch.rpm SHA-256: e2b747f3f2980880268f569b6d16f30daeda805f34fc83ba40f16febed141a87 Red Hat Enterprise Linux for IBM z Systems 10 SRPM rsync-3.4.4-1.el10_2.src.rpm SHA-256: 1cce801926a1ca7a75520ae0ec1b238d657d0e744bb6e6cc928b320781639b94 s390x rsync-3.4.4-1.el10_2.s390x.rpm SHA-256: 5dd09b0853ca550094ce423a10914f867a05fe7d373560568d57cb5e36ec982a rsync-daemon-3.4.4-1.el10_2.noarch.rpm SHA-256: 585546e1d4e41b6eba4878065ae678974baa1a5833f8256080b97e2d9055f0da rsync-debuginfo-3.4.4-1.el10_2.s390x.rpm SHA-256: af98537f8786b9e31f15a62a50ef78dbef206f73015ca2669adf55879fb75d41 rsync-debugsource-3.4.4-1.el10_2.s390x.rpm SHA-256: 643820da47dc6c0e64e409c86defbb99729b54d01b60ae2e5613e58a460de7b8 rsync-rrsync-3.4.4-1.el10_2.noarch.rpm SHA-256: e2b747f3f2980880268f569b6d16f30daeda805f34fc83ba40f16febed141a87 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM rsync-3.4.4-1.el10_2.src.rpm SHA-256: 1cce801926a1ca7a75520ae0ec1b238d657d0e744bb6e6cc928b320781639b94 s390x rsync-3.4.4-1.el10_2.s390x.rpm SHA-256: 5dd09b0853ca550094ce423a10914f867a05fe7d373560568d57cb5e36ec982a rsync-daemon-3.4.4-1.el10_2.noarch.rpm SHA-256: 585546e1d4e41b6eba4878065ae678974baa1a5833f8256080b97e2d9055f0da rsync-debuginfo-3.4.4-1.el10_2.s390x.rpm SHA-256: af98537f8786b9e31f15a62a50ef78dbef206f73015ca2669adf55879fb75d41 rsync-debugsource-3.4.4-1.el10_2.s390x.rpm SHA-256: 643820da47dc6c0e64e409c86defbb99729b54d01b60ae2e5613e58a460de7b8 rsync-rrsync-3.4.4-1.el10_2.noarch.rpm SHA-256: e2b747f3f2980880268f569b6d16f30daeda805f34fc83ba40f16febed141a87 Red Hat Enterprise Linux for Power, little endian 10 SRPM rsync-3.4.4-1.el10_2.src.rpm SHA-256: 1cce801926a1ca7a75520ae0ec1b238d657d0e744bb6e6cc928b320781639b94 ppc64le rsync-3.4.4-1.el10_2.ppc64le.rpm SHA-256: c23e5a272f6b84469bdf8c7493a920111be128be8d56f6ca057701139d8e2e23 rsync-daemon-3.4.4-1.el10_2.noarch.rpm SHA-256: 585546e1d4e41b6eba4878065ae678974baa1a5833f8256080b97e2d9055f0da rsync-debuginfo-3.4.4-1.el10_2.ppc64le.rpm SHA-256: 10846219508c54d615e22360ccf3e08bd5a6ce831904ab040e211824cbb72532 rsync-debugsource-3.4.4-1.el10_2.ppc64le.rpm SHA-256: e5bfb5c22943f3cdc2c5277fb074a1b72bfb4c1bdbe4b6dc20d3a908a41fe2e9 rsync-rrsync-3.4.4-1.el10_2.noarch.rpm SHA-256: e2b747f3f2980880268f569b6d16f30daeda805f34fc83ba40f16febed141a87 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM rsync-3.4.4-1.el10_2.src.rpm SHA-256: 1cce801926a1ca7a75520ae0ec1b238d657d0e744bb6e6cc928b320781639b94 ppc64le rsync-3.4.4-1.el10_2.ppc64le.rpm SHA-256: c23e5a272f6b84469bdf8c7493a920111be128be8d56f6ca057701139d8e2e23 rsync-daemon-3.4.4-1.el10_2.noarch.rpm SHA-256: 585546e1d4e41b6eba4878065ae678974baa1a5833f8256080b97e2d9055f0da rsync-debuginfo-3.4.4-1.el10_2.ppc64le.rpm SHA-256: 10846219508c54d615e22360ccf3e08bd5a6ce831904ab040e211824cbb72532 rsync-debugsource-3.4.4-1.el10_2.ppc64le.rpm SHA-256: e5bfb5c22943f3cdc2c5277fb074a1b72bfb4c1bdbe4b6dc20d3a908a41fe2e9 rsync-rrsync-3.4.4-1.el10_2.noarch.rpm SHA-256: e2b747f3f2980880268f569b6d16f30daeda805f34fc83ba40f16febed141a87 Red Hat Enterprise Linux for ARM 64 10 SRPM rsync-3.4.4-1.el10_2.src.rpm SHA-256: 1cce801926a1ca7a75520ae0ec1b238d657d0e744bb6e6cc928b320781639b94 aarch64 rsync-3.4.4-1.el10_2.aarch64.rpm SHA-256: 221d3a758faa133d357797f6807a82d840ada4281347b1b99b86c5409d4c0d58 rsync-daemon-3.4.4-1.el10_2.noarch.rpm SHA-256: 585546e1d4e41b6eba4878065ae678974baa1a5833f8256080b97e2d9055f0da rsync-debuginfo-3.4.4-1.el10_2.aarch64.rpm SHA-256: d12f980b302500986a71f7be4134246cd3dd9784f5ad5701b0372e73f29ffeb4 rsync-debugsource-3.4.4-1.el10_2.aarch64.rpm SHA-256: 56faa592b84f3a944c84b5d5a3353c2b0546d79e01fc6751bbaf90784d5e0d08 rsync-rrsync-3.4.4-1.el10_2.noarch.rpm SHA-256: e2b747f3f2980880268f569b6d16f30daeda805f34fc83ba40f16febed141a87 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 SRPM rsync-3.4.4-1.el10_2.src.rpm SHA-256: 1cce801926a1ca7a75520ae0ec1b238d657d0e744bb6e6cc928b320781639b94 aarch64 rsync-3.4.4-1.el10_2.aarch64.rpm SHA-256: 221d3a758faa133d357797f6807a82d840ada4281347b1b99b86c5409d4c0d58 rsync-daemon-3.4.4-1.el10_2.noarch.rpm SHA-256: 585546e1d4e41b6eba4878065ae678974baa1a5833f8256080b97e2d9055f0da rsync-debuginfo-3.4.4-1.el10_2.aarch64.rpm SHA-256: d12f980b302500986a71f7be4134246cd3dd9784f5ad5701b0372e73f29ffeb4 rsync-debugsource-3.4.4-1.el10_2.aarch64.rpm SHA-256: 56faa592b84f3a944c84b5d5a3353c2b0546d79e01fc6751bbaf90784d5e0d08 rsync-rrsync-3.4.4-1.el10_2.noarch.rpm SHA-256: e2b747f3f2980880268f569b6d16f30daeda805f34fc83ba40f16febed141a87 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 SRPM rsync-3.4.4-1.el10_2.src.rpm SHA-256: 1cce801926a1ca7a75520ae0ec1b238d657d0e744bb6e6cc928b320781639b94 aarch64 rsync-3.4.4-1.el10_2.aarch64.rpm SHA-256: 221d3a758faa133d357797f6807a82d840ada4281347b1b99b86c5409d4c0d58 rsync-daemon-3.4.4-1.el10_2.noarch.rpm SHA-256: 585546e1d4e41b6eba4878065ae678974baa1a5833f8256080b97e2d9055f0da rsync-debuginfo-3.4.4-1.el10_2.aarch64.rpm SHA-256: d12f980b302500986a71f7be4134246cd3dd9784f5ad5701b0372e73f29ffeb4 rsync-debugsource-3.4.4-1.el10_2.aarch64.rpm SHA-256: 56faa592b84f3a944c84b5d5a3353c2b0546d79e01fc6751bbaf90784d5e0d08 rsync-rrsync-3.4.4-1.el10_2.noarch.rpm SHA-256: e2b747f3f2980880268