[CLSA-2026:1793004969] Fix CVE(s): CVE-2026-82251, CVE-2026-82252, CVE-2026-82253
Type:
security
Severity:
Moderate
Release date:
2026-10-26 08:56:27 UTC
Description:
* SECURITY UPDATE: submodule name path traversal in vendored gix crate - debian/patches/CVE-2026-82251-CVE-2026-82253.patch: validate names in gix - CVE-2026-82251 * SECURITY UPDATE: .gitmodules symlink followed in vendored gix crate - debian/patches/CVE-2026-82252.patch: ignore a symlinked .gitmodules - CVE-2026-82252 * SECURITY UPDATE: submodule name check bypass in vendored gix-validate crate - debian/patches/CVE-2026-82251-CVE-2026-82253.patch: reject any .. part - CVE-2026-82253
CVEs fixed:
Updated packages:
  • cargo1.9_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:985fb2a17d7c37d8db9b3e23e92dd78cc9f1a111
  • cargo1.9-doc_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:a80bdb4078865d337e0ad78bbc40b9c409e80817
  • libstd-rust1.9-1.90_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:9fd4320ce44808819facb356c354014eb058ee4d
  • libstd-rust1.9-dev_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:fc7ab52e09ec6af6925767ac91eb13053d979202
  • rust1.9-all_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:54cfc49aa3046001e2531dc9e6fa43960411f41f
  • rust1.9-analyzer_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:9506e77d15bfe9430233f161760d629d1362d40b
  • rust1.9-clippy_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:b3e174f3f9eb88a86b7f11414250c26bfbc4a7d7
  • rust1.9-doc_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:7a563c4d36ef82888b72202e8b66948432d019b3
  • rust1.9-gdb_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:b718b713047ac200ef68e4df75028961d8920689
  • rust1.9-lldb_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:ebe06cc4f98b9b4110c499558022d734bd84af02
  • rust1.9-llvm_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:b619b7236840021f8d4ee402e9b79080e82333e7
  • rust1.9-src_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:6771c6fd21763772b4124e2dffd83a7749894a19
  • rustc1.9_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:969ee0b07555129292f30f48626b7c61cfebcb1b
  • rustfmt1.9_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:74929eef07b68805a38d2c1647acdd80d0446e51
  • cargo1.9_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:41da0276bf7aadd5ca6d725a3bfa55f1b3725b4f
  • libstd-rust1.9-1.90_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:0044e6ee5fad26d86b0b125fb801e373c39db2d5
  • libstd-rust1.9-dev_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:c38c8b20ca5e798c2a3a6f4be69532fb1627b345
  • rust1.9-analyzer_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:d5f418989af643480231a1cb8b9b8bc14caa295d
  • rust1.9-clippy_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:0bc007eeae3560283e1cc4202626e26f93e9a89d
  • rust1.9-llvm_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:097f1791e81aa2db8ee5a602c955aa315da5d278
  • rustc1.9_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:7c07b5dec084e0350b9e58da755ec71c8ece5cee
  • rustfmt1.9_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:07bd8aed936d2813d7ce63356e0cccd9b876ad15
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.