Release date:
2026-10-14 10:48:08 UTC
Description:
- CVE-2026-53801: prevent the sender from listing a directory outside the
transfer through a path component swapped for a symlink
- CVE-2026-53797: prevent the sender from reading a file outside the
transfer the same way
- CVE-2026-53800: prevent --remove-source-files from deleting a file
outside the transfer the same way
Updated packages:
-
rsync-3.0.6-12.el6.tuxcare.els13.i686.rpm
sha:64f02b98458435e5d7b6552453386b715ee72ebe34bb25af7c4bdbeb19165651
-
rsync-3.0.6-12.el6.tuxcare.els13.x86_64.rpm
sha:bc6e56b6083598a1b98788928db184a4310e04c2f404ad9b57093900723267d5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.