Back Linuxsecurity

Fedora 43 Rsync Critical Denial of Service Vulnerability 2026

Linuxsecurity •LinuxSecurity Advisories • June 26, 2026

New version 3.4.4 with multiple regression fixes. This update also fixes the following CVEs: CVE-2026-29518 CVE-2026-43617 CVE-2026-43618 CVE-2026-43619 CVE-2026-43620 CVE-2026-45232

* Mon Jun 8 2026 Michal Ruprich - 3.4.4-1 - New version 3.4.4 * Fri May 29 2026 Michal Ruprich - 3.4.3-1 - New version 3.4.3

[ 1 ] Bug #2463360 - rsync-3.4.3 is available [ 2 ] Bug #2480388 - CVE-2026-45232 rsync: Rsync: Denial of Service via malformed HTTP proxy response [fedora-all] [ 3 ] Bug #2486185 - rsync-3.4.4 is available

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-a04e445b3f' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora Restic and Singularity-CE Vulnerabilities Lead to Denial of Service Risks Recent updates for Fedora 43 and 44 address multiple vulnerabilities in Restic and Singularity-CE, including Denial of Service (DoS) issues and unauthorized access risks. The vulnerabilities, identified as CVE-2026-34986, CVE-2026-41179, and CVE-2026-41176, affect Fedora systems and allow attackers to exploit crafted JSON Web Encryption objects and unauthorized command execution. The updates were released on June 10, 2026, and are critical for users to apply to mitigate potential attacks. The vulnerabilities were reported to have been published between April 6 and April 23, 2026. Users are advised to upgrade to the latest versions using the provided commands to secure their systems against these threats. 19 sources 61

Extracted Entities

Fedora 43 Rsync Critical Denial of Service Vulnerability 2026

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (6)

Platforms (1)