[CLSA-2026:1792582985] rsync: Fix of CVE-2026-70461
Type:
security
Severity:
Critical
Release date:
2026-10-21 20:43:51 UTC
Description:
- CVE-2026-70461: fix a one-byte heap overflow on a filter argument ending in a backslash, which add_implied_include() did not count when sizing the rule pattern
CVEs fixed:
Updated packages:
  • rsync-3.1.2-12.0.5.el7_9.tuxcare.els6.aarch64.rpm
    sha:fb0f266d21a6f862a7a29494b21da6dadfd1bef6c74a7f4b04c5fb62e3b4a217
  • rsync-3.1.2-12.0.5.el7_9.tuxcare.els6.i686.rpm
    sha:37122ed9d7477a07b4734fcff69d862400afc0c3021303263477f8cf87499908
  • rsync-3.1.2-12.0.5.el7_9.tuxcare.els6.x86_64.rpm
    sha:2aca04c6a102d07e20246318bb379ab975ae5cf54036fe01f3a2126a0ffe9aa3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.