[CLSA-2026:1791971528] rsync: Fix of 4 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-14 10:48:08 UTC
Description:
- CVE-2026-53801: prevent the sender from listing a directory outside the transfer through a path component swapped for a symlink - CVE-2026-53797: prevent the sender from reading a file outside the transfer the same way - CVE-2026-53800: prevent --remove-source-files from deleting a file outside the transfer the same way
Updated packages:
  • rsync-3.0.6-12.el6.tuxcare.els13.i686.rpm
    sha:64f02b98458435e5d7b6552453386b715ee72ebe34bb25af7c4bdbeb19165651
  • rsync-3.0.6-12.el6.tuxcare.els13.x86_64.rpm
    sha:bc6e56b6083598a1b98788928db184a4310e04c2f404ad9b57093900723267d5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.