Release date:
2026-10-14 09:55:32 UTC
Description:
- CVE-2026-53801: extend the fix to the sender outside a daemon: prevent
it from listing a directory outside the transfer through a path
component swapped for a symlink
- CVE-2026-53797: prevent the sender from reading a file outside the
transfer the same way
- CVE-2026-53800: prevent --remove-source-files from deleting a file
outside the transfer the same way
Updated packages:
-
rsync-3.1.2-12.0.5.amzn2.tuxcare.els2.aarch64.rpm
sha:9bfc96e83f1260158d6ac0d01e2e8cae952febcc3d696d4ee6fda3173fbc48d8
-
rsync-3.1.2-12.0.5.amzn2.tuxcare.els2.i686.rpm
sha:a0874a80e93a57a8387ef0049cdf133ba9cfc92a754abda5d58c5c102ea3f2d5
-
rsync-3.1.2-12.0.5.amzn2.tuxcare.els2.x86_64.rpm
sha:ac011cb84f2b309afb42131dc72d582aa554a1d266ecb740db157907461db8a7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
