[CLSA-2026:1779787578] rsync: Fix of 2 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-05-26 09:26:23 UTC
Description:
- CVE-2026-43620: fix client SIGSEGV via parent_ndx<0 in receiver - CVE-2026-43617: fix hostname ACL bypass via post-chroot DNS lookup
Updated packages:
  • rsync-3.2.5-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:ad1f0489da66ac80b2aa2bfdcf2052ec56089007c605a0c5aabe4b2ae445a0d2
  • rsync-daemon-3.2.5-3.el9_6.tuxcare.els4.noarch.rpm
    sha:248bb08401ac541eb13a59b5719600e551a0a4ea47cecd1a530ac950900f4efb
  • rsync-rrsync-3.2.5-3.el9_6.tuxcare.els4.noarch.rpm
    sha:f97b194466a26efdc40a15564cf90b8478c1ad38a594cb97cf6e07aa171ae81d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.