{
	"document":{
		"aggregate_severity":{
			"namespace":"https://nvd.nist.gov/vuln-metrics/cvss",
			"text":"HIGH"
		},
		"category":"csaf_vex",
		"csaf_version":"2.0",
		"distribution":{
			"tlp":{
				"label":"WHITE",
				"url":"https:/www.first.org/tlp/"
			}
		},
		"lang":"en",
		"notes":[
			{
				"text":"Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system calls including chmod, lchown, utimes, rename, unlink, mkdir, symlink, mknod, link, rmdir, and lstat that allow local attackers to redirect operations to files outside the exported rsync module. Attackers with local filesystem access can exploit the timing window between path resolution and syscall execution by swapping symlinks to apply sender-supplied permissions, ownership, timestamps, or filenames to arbitrary files outside the intended module boundary on rsync daemons configured with 'use chroot = no'.",
				"category":"general",
				"title":"Synopsis"
			}
		],
		"publisher":null,
		"references":[
			{
				"summary":"nvd cve",
				"category":"external",
				"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43619"
			},
			{
				"summary":"CVE-2026-43619 vex file",
				"category":"self",
				"url":"https://repo.openeuler.org/security/data/csaf/cve/2026/csaf-openeuler-cve-2026-43619.json"
			},
			{
				"summary":"openEuler-SA-2026-4072",
				"category":"self",
				"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4072"
			},
			{
				"summary":"CVE-2026-43619",
				"category":"self",
				"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-43619&packageName=rsync"
			}
		],
		"title":"openEuler cve CVE-2026-43619",
		"tracking":{
			"initial_release_date":"2026-09-30T16:04:11+08:00",
			"revision_history":[
				{
					"date":"2026-09-30T16:04:11+08:00",
					"summary":"Initial",
					"number":"1.0.0"
				}
			],
			"generator":{
				"date":"2026-09-30T16:04:11+08:00",
				"engine":{
					"name":"openEuler CSAF Tool V1.0"
				}
			},
			"current_release_date":"2026-09-30T16:04:11+08:00",
			"id":"CVE-2026-43619",
			"version":"1.0.0",
			"status":"interim"
		}
	},
	"product_tree":{
		"branches":[
			{
				"name":"openEuler",
				"category":"vendor",
				"branches":[
					{
						"name":"openEuler",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP4"
									},
									"product_id":"openEuler-24.03-LTS-SP4",
									"name":"openEuler-24.03-LTS-SP4"
								},
								"name":"openEuler-24.03-LTS-SP4",
								"category":"product_version"
							}
						],
						"category":"product_name"
					},
					{
						"name":"src",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP4"
									},
									"product_id":"rsync-3.2.7-12.oe2403sp4.src.rpm",
									"name":"rsync-3.2.7-12.oe2403sp4.src.rpm"
								},
								"name":"rsync-3.2.7-12.oe2403sp4.src.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"x86_64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP4"
									},
									"product_id":"rsync-3.2.7-12.oe2403sp4.x86_64.rpm",
									"name":"rsync-3.2.7-12.oe2403sp4.x86_64.rpm"
								},
								"name":"rsync-3.2.7-12.oe2403sp4.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP4"
									},
									"product_id":"rsync-debuginfo-3.2.7-12.oe2403sp4.x86_64.rpm",
									"name":"rsync-debuginfo-3.2.7-12.oe2403sp4.x86_64.rpm"
								},
								"name":"rsync-debuginfo-3.2.7-12.oe2403sp4.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP4"
									},
									"product_id":"rsync-debugsource-3.2.7-12.oe2403sp4.x86_64.rpm",
									"name":"rsync-debugsource-3.2.7-12.oe2403sp4.x86_64.rpm"
								},
								"name":"rsync-debugsource-3.2.7-12.oe2403sp4.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP4"
									},
									"product_id":"rsync-help-3.2.7-12.oe2403sp4.x86_64.rpm",
									"name":"rsync-help-3.2.7-12.oe2403sp4.x86_64.rpm"
								},
								"name":"rsync-help-3.2.7-12.oe2403sp4.x86_64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"aarch64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP4"
									},
									"product_id":"rsync-3.2.7-12.oe2403sp4.aarch64.rpm",
									"name":"rsync-3.2.7-12.oe2403sp4.aarch64.rpm"
								},
								"name":"rsync-3.2.7-12.oe2403sp4.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP4"
									},
									"product_id":"rsync-debuginfo-3.2.7-12.oe2403sp4.aarch64.rpm",
									"name":"rsync-debuginfo-3.2.7-12.oe2403sp4.aarch64.rpm"
								},
								"name":"rsync-debuginfo-3.2.7-12.oe2403sp4.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP4"
									},
									"product_id":"rsync-debugsource-3.2.7-12.oe2403sp4.aarch64.rpm",
									"name":"rsync-debugsource-3.2.7-12.oe2403sp4.aarch64.rpm"
								},
								"name":"rsync-debugsource-3.2.7-12.oe2403sp4.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP4"
									},
									"product_id":"rsync-help-3.2.7-12.oe2403sp4.aarch64.rpm",
									"name":"rsync-help-3.2.7-12.oe2403sp4.aarch64.rpm"
								},
								"name":"rsync-help-3.2.7-12.oe2403sp4.aarch64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					}
				]
			}
		],
		"relationships":[
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP4",
				"product_reference":"rsync-3.2.7-12.oe2403sp4.src.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP4:rsync-3.2.7-12.oe2403sp4.src",
					"name":"rsync-3.2.7-12.oe2403sp4.src as a component of openEuler-24.03-LTS-SP4"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP4",
				"product_reference":"rsync-3.2.7-12.oe2403sp4.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP4:rsync-3.2.7-12.oe2403sp4.x86_64",
					"name":"rsync-3.2.7-12.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP4",
				"product_reference":"rsync-debuginfo-3.2.7-12.oe2403sp4.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP4:rsync-debuginfo-3.2.7-12.oe2403sp4.x86_64",
					"name":"rsync-debuginfo-3.2.7-12.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP4",
				"product_reference":"rsync-debugsource-3.2.7-12.oe2403sp4.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP4:rsync-debugsource-3.2.7-12.oe2403sp4.x86_64",
					"name":"rsync-debugsource-3.2.7-12.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP4",
				"product_reference":"rsync-help-3.2.7-12.oe2403sp4.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP4:rsync-help-3.2.7-12.oe2403sp4.x86_64",
					"name":"rsync-help-3.2.7-12.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP4",
				"product_reference":"rsync-3.2.7-12.oe2403sp4.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP4:rsync-3.2.7-12.oe2403sp4.aarch64",
					"name":"rsync-3.2.7-12.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP4",
				"product_reference":"rsync-debuginfo-3.2.7-12.oe2403sp4.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP4:rsync-debuginfo-3.2.7-12.oe2403sp4.aarch64",
					"name":"rsync-debuginfo-3.2.7-12.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP4",
				"product_reference":"rsync-debugsource-3.2.7-12.oe2403sp4.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP4:rsync-debugsource-3.2.7-12.oe2403sp4.aarch64",
					"name":"rsync-debugsource-3.2.7-12.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP4",
				"product_reference":"rsync-help-3.2.7-12.oe2403sp4.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP4:rsync-help-3.2.7-12.oe2403sp4.aarch64",
					"name":"rsync-help-3.2.7-12.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4"
				},
				"category":"default_component_of"
			}
		]
	},
	"vulnerabilities":[
		{
			"cve":"CVE-2026-43619",
			"notes":[
				{
					"text":"Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system calls including chmod, lchown, utimes, rename, unlink, mkdir, symlink, mknod, link, rmdir, and lstat that allow local attackers to redirect operations to files outside the exported rsync module. Attackers with local filesystem access can exploit the timing window between path resolution and syscall execution by swapping symlinks to apply sender-supplied permissions, ownership, timestamps, or filenames to arbitrary files outside the intended module boundary on rsync daemons configured with 'use chroot = no'.",
					"category":"description",
					"title":"Vulnerability Description"
				}
			],
			"product_status":{
				"fixed":[
					"openEuler-24.03-LTS-SP4:rsync-3.2.7-12.oe2403sp4.src",
					"openEuler-24.03-LTS-SP4:rsync-3.2.7-12.oe2403sp4.x86_64",
					"openEuler-24.03-LTS-SP4:rsync-debuginfo-3.2.7-12.oe2403sp4.x86_64",
					"openEuler-24.03-LTS-SP4:rsync-debugsource-3.2.7-12.oe2403sp4.x86_64",
					"openEuler-24.03-LTS-SP4:rsync-help-3.2.7-12.oe2403sp4.x86_64",
					"openEuler-24.03-LTS-SP4:rsync-3.2.7-12.oe2403sp4.aarch64",
					"openEuler-24.03-LTS-SP4:rsync-debuginfo-3.2.7-12.oe2403sp4.aarch64",
					"openEuler-24.03-LTS-SP4:rsync-debugsource-3.2.7-12.oe2403sp4.aarch64",
					"openEuler-24.03-LTS-SP4:rsync-help-3.2.7-12.oe2403sp4.aarch64"
				]
			},
			"remediations":[
				{
					"product_ids":[
						"openEuler-24.03-LTS-SP4:rsync-3.2.7-12.oe2403sp4.src",
						"openEuler-24.03-LTS-SP4:rsync-3.2.7-12.oe2403sp4.x86_64",
						"openEuler-24.03-LTS-SP4:rsync-debuginfo-3.2.7-12.oe2403sp4.x86_64",
						"openEuler-24.03-LTS-SP4:rsync-debugsource-3.2.7-12.oe2403sp4.x86_64",
						"openEuler-24.03-LTS-SP4:rsync-help-3.2.7-12.oe2403sp4.x86_64",
						"openEuler-24.03-LTS-SP4:rsync-3.2.7-12.oe2403sp4.aarch64",
						"openEuler-24.03-LTS-SP4:rsync-debuginfo-3.2.7-12.oe2403sp4.aarch64",
						"openEuler-24.03-LTS-SP4:rsync-debugsource-3.2.7-12.oe2403sp4.aarch64",
						"openEuler-24.03-LTS-SP4:rsync-help-3.2.7-12.oe2403sp4.aarch64"
					],
					"details":"rsync security update",
					"category":"vendor_fix",
					"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4072"
				}
			],
			"scores":[
				{
					"cvss_v3":{
						"baseSeverity":"MEDIUM",
						"baseScore":6.3,
						"vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
						"version":"3.1"
					},
					"products":[
						"openEuler-24.03-LTS-SP4:rsync-3.2.7-12.oe2403sp4.src",
						"openEuler-24.03-LTS-SP4:rsync-3.2.7-12.oe2403sp4.x86_64",
						"openEuler-24.03-LTS-SP4:rsync-debuginfo-3.2.7-12.oe2403sp4.x86_64",
						"openEuler-24.03-LTS-SP4:rsync-debugsource-3.2.7-12.oe2403sp4.x86_64",
						"openEuler-24.03-LTS-SP4:rsync-help-3.2.7-12.oe2403sp4.x86_64",
						"openEuler-24.03-LTS-SP4:rsync-3.2.7-12.oe2403sp4.aarch64",
						"openEuler-24.03-LTS-SP4:rsync-debuginfo-3.2.7-12.oe2403sp4.aarch64",
						"openEuler-24.03-LTS-SP4:rsync-debugsource-3.2.7-12.oe2403sp4.aarch64",
						"openEuler-24.03-LTS-SP4:rsync-help-3.2.7-12.oe2403sp4.aarch64"
					]
				}
			],
			"threats":[
				{
					"details":"Medium",
					"category":"impact"
				}
			],
			"title":"CVE-2026-43619"
		}
	]
}