Release date:
2026-10-17 15:00:54 UTC
Description:
- CVE-2026-53801: extend the fix to the sender outside a daemon: prevent
it from listing a directory outside the transfer through a path
component swapped for a symlink
- CVE-2026-53797: prevent the sender from reading a file outside the
transfer the same way
- CVE-2026-53800: prevent --remove-source-files from deleting a file
outside the transfer the same way
Updated packages:
-
rsync-3.1.2-12.0.5.el7_9.tuxcare.els2.i686.rpm
sha:3bc8cd190e32d28bfec5756f0104463bcadfa1e6dd8e05c51108a52a45ccf0d3
-
rsync-3.1.2-12.0.5.el7_9.tuxcare.els2.x86_64.rpm
sha:2890ef4926987c3ede8fe2ece88a7d10c4156bc5121515bacd6822b5eca7e0c4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
