[CLSA-2026:1793005200] Fix CVE(s): CVE-2026-82251, CVE-2026-82252, CVE-2026-82253
Type:
security
Severity:
Moderate
Release date:
2026-10-26 09:00:17 UTC
Description:
* SECURITY UPDATE: submodule name path traversal in vendored gix crate - debian/patches/CVE-2026-82251-CVE-2026-82253.patch: validate names in gix - CVE-2026-82251 * SECURITY UPDATE: .gitmodules symlink followed in vendored gix crate - debian/patches/CVE-2026-82252.patch: ignore a symlinked .gitmodules - CVE-2026-82252 * SECURITY UPDATE: submodule name check bypass in vendored gix-validate crate - debian/patches/CVE-2026-82251-CVE-2026-82253.patch: reject any .. part - CVE-2026-82253
CVEs fixed:
Updated packages:
  • cargo1.9_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:fc9cae5bbd3850e1b67b48e3470bc8b28767dfbd
  • cargo1.9-doc_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:0c032da005b1f8a6411bfcf4a583d4b417e01dc1
  • libstd-rust1.9-1.90_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:f9c33a1b8fd9a516f3d013559561ca6619b56db7
  • libstd-rust1.9-dev_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:9711d334c358e0f8607aa3be742f13f05aed112d
  • rust1.9-all_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:51597581eb78243d9879018ab4b9224bf1136d8a
  • rust1.9-analyzer_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:bd1cccd541493b6700396d8f7a50edf2a50ee6bf
  • rust1.9-clippy_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:500419701089b50f346baf682a5334faa358e92b
  • rust1.9-doc_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:b89527b9bb623bf07a00345f7b2f08dc56a2e729
  • rust1.9-gdb_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:bd77f3646fb19a6b5ff8179c0ceb2cb8b1906b2c
  • rust1.9-lldb_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:18a026876c46ef8cfca5ead92048a70e91801a23
  • rust1.9-llvm_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:ed8152c23e9da2be199a1e5c7f3c8e279cebb195
  • rust1.9-src_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:e174f0d8cfecd17120f4044a64e754f34506f441
  • rustc1.9_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:1e09eaef8952179d6e4d8a660705d71ddd222e4e
  • rustfmt1.9_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:8ba6e136304855840b7ce1652f209759ade4b855
  • cargo1.9_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:f049b86560da709647a69dba6626f2cc431aa52f
  • libstd-rust1.9-1.90_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:3e2a453dda5dd6bfd7d42e560a30708925064010
  • libstd-rust1.9-dev_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:7aff0996f540aa1b1ec8845c5345ca2d916d406d
  • rust1.9-analyzer_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:c3155c967222937a1437c07f5d41dd045ee6e2e1
  • rust1.9-clippy_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:53bec888463149eaea9cd0934346b115677dc69c
  • rust1.9-llvm_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:64d506503b421056445fb3c349021ea6cf2a357a
  • rustc1.9_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:f5518d07bcf75a68864137d4927bf87c423ebfac
  • rustfmt1.9_1.90.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:e58bec3243caecbc70077b65eac74d634493a4b5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.