[CLSA-2026:1793007972] Fix CVE(s): CVE-2026-82251, CVE-2026-82252, CVE-2026-82253
Type:
security
Severity:
Moderate
Release date:
2026-10-26 09:46:29 UTC
Description:
* SECURITY UPDATE: submodule name path traversal in vendored gix crate - debian/patches/CVE-2026-82251-CVE-2026-82253.patch: validate names in gix - CVE-2026-82251 * SECURITY UPDATE: .gitmodules symlink followed in vendored gix crate - debian/patches/CVE-2026-82252.patch: ignore a symlinked .gitmodules - CVE-2026-82252 * SECURITY UPDATE: submodule name check bypass in vendored gix-validate crate - debian/patches/CVE-2026-82251-CVE-2026-82253.patch: reject any .. part - CVE-2026-82253
CVEs fixed:
Updated packages:
  • cargo1.88_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_amd64.deb
    sha:c87fb7ced5c0e69cb360dfc5f9296b70c61032be
  • cargo1.88-doc_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_all.deb
    sha:71cf0e940890229d61fe92f6b1743db0fd1a1033
  • libstd-rust1.88-1.88_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_amd64.deb
    sha:8b1eaa40d79688924da021b19a3d81639cb55b52
  • libstd-rust1.88-dev_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_amd64.deb
    sha:0c533fc5c0e2a3c4ac8b364b5ec2dd34a13c309e
  • rust1.88-all_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_all.deb
    sha:90a9dc59a0956885333e15ef1b81b7fd1f25abcc
  • rust1.88-analyzer_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_amd64.deb
    sha:b060a0ef19d0c0f7ff993ea372dc84f2b295a468
  • rust1.88-clippy_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_amd64.deb
    sha:de8c4754cb7eb6bfd7efc763cb48a78b98a7c4bc
  • rust1.88-doc_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_all.deb
    sha:c70c04c316ee380c7f902cfa367a3b88ef38c0c1
  • rust1.88-gdb_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_all.deb
    sha:9cdd724c5e5942adccbef76d520ff83730d67a37
  • rust1.88-lldb_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_all.deb
    sha:413592c41f55636dbc77e76257b0fc0199e9d9ae
  • rust1.88-llvm_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_amd64.deb
    sha:5970d0b07156c5980f08302b7c6571cb7059ed39
  • rust1.88-src_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_all.deb
    sha:8d07e267fe6a6345497dd11f0f7dde6dc17a4244
  • rustc1.88_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_amd64.deb
    sha:ecd161d914817f010aae6e8e21fa787109c8d978
  • rustfmt1.88_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_amd64.deb
    sha:85ec93bf8fc03b77354d16e44089ed56909f8e44
  • cargo1.88_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_arm64.deb
    sha:7ec725303f6e2be2455ff468100c9a4a13c6f95a
  • libstd-rust1.88-1.88_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_arm64.deb
    sha:e60194e12043ee1d234d830902e3b37b8f78b250
  • libstd-rust1.88-dev_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_arm64.deb
    sha:f7e0a77266052e790e4d61a5ef518d3dae40cd0c
  • rust1.88-analyzer_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_arm64.deb
    sha:04bb2894f5b6ba8a95abb7d9d9bcffeee1305f56
  • rust1.88-clippy_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_arm64.deb
    sha:73a1eb44d1f3ded95790fb46a96e347c471be7f1
  • rust1.88-llvm_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_arm64.deb
    sha:94282dd46ab58a8c54f195fbb3884a6e02231672
  • rustc1.88_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_arm64.deb
    sha:7def5e942367264d4895490d08f54cf29ef5d777
  • rustfmt1.88_1.88.0+dfsg1-2~bpo13+1+tuxcare.els8_arm64.deb
    sha:7d33da9bdc257d3d33e51f9fef0cdb0d7605ffc6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.