[CLSA-2026:1793008178] Fix CVE(s): CVE-2026-82251, CVE-2026-82252, CVE-2026-82253
Type:
security
Severity:
Moderate
Release date:
2026-10-26 09:49:55 UTC
Description:
* SECURITY UPDATE: submodule name path traversal in vendored gix crate - debian/patches/CVE-2026-82251-CVE-2026-82253.patch: validate names in gix - CVE-2026-82251 * SECURITY UPDATE: .gitmodules symlink followed in vendored gix crate - debian/patches/CVE-2026-82252.patch: ignore a symlinked .gitmodules - CVE-2026-82252 * SECURITY UPDATE: submodule name check bypass in vendored gix-validate crate - debian/patches/CVE-2026-82251-CVE-2026-82253.patch: reject any .. part - CVE-2026-82253
CVEs fixed:
Updated packages:
  • cargo1.88_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_amd64.deb
    sha:10099c4614fbc31881a0ea75045ab8d2f4040e6a
  • cargo1.88-doc_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_all.deb
    sha:a70277923a383c321fbaa32775827e6392d6d31b
  • libstd-rust1.88-1.88_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_amd64.deb
    sha:7610f1d764b16d6dd0bb5ca9963b1069a3b0274e
  • libstd-rust1.88-dev_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_amd64.deb
    sha:a73b9d43ff0e13c6276750857864c579d14f1232
  • rust1.88-all_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_all.deb
    sha:a9c9af13efeed46365d23b32b7266865c000b1eb
  • rust1.88-analyzer_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_amd64.deb
    sha:7fc4296a20bc804b3aed75183ab24ffabad2960f
  • rust1.88-clippy_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_amd64.deb
    sha:d773ed36f6044a4d4117bd714b325c0d9718f1a2
  • rust1.88-doc_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_all.deb
    sha:38c4a5c2f9aae4a7db121b889679f14a02d34a77
  • rust1.88-gdb_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_all.deb
    sha:7f598f4b933c21bb126c8072a222528d13b2613d
  • rust1.88-lldb_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_all.deb
    sha:87fcdf6d0c020f362a71c6dd0c91a1699fcd573f
  • rust1.88-llvm_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_amd64.deb
    sha:5af536203786f2625fe4a13f4ac272982a881288
  • rust1.88-src_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_all.deb
    sha:566504bfb0e301d5c1ed86f026cc1298bb2fc6de
  • rustc1.88_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_amd64.deb
    sha:5bad896c0196b0cf34532155055637a34e697e83
  • rustfmt1.88_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_amd64.deb
    sha:18c4d4aa7d7834262a7d9de50a2fdcd46d1a70d0
  • cargo1.88_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_arm64.deb
    sha:adf5f7296a545c58106024af0bf3425c279575dc
  • libstd-rust1.88-1.88_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_arm64.deb
    sha:7d3a0acabed99f85689132df318bafbe7f0a7c5d
  • libstd-rust1.88-dev_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_arm64.deb
    sha:8115c58e9557614b74562dd0fdc052bbca4bca5e
  • rust1.88-analyzer_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_arm64.deb
    sha:1b1554eaafca77c0fed06665fbcaded71cd9d239
  • rust1.88-clippy_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_arm64.deb
    sha:0669fe85826e373faa349854d644d90ce5235adb
  • rust1.88-llvm_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_arm64.deb
    sha:02ca1e8322373dc2805dc8434d2fbc8bbff3d7dd
  • rustc1.88_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_arm64.deb
    sha:c4c2d00aa74052a93e5ad283d5a130045e6105d6
  • rustfmt1.88_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_arm64.deb
    sha:abe9d4b256a603474af5b3dd6476ce51012b48f9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.