Release date:
2026-10-14 10:02:34 UTC
Description:
- CVE-2026-53801: extend the fix to the sender outside a daemon: prevent
it from listing a directory outside the transfer through a path
component swapped for a symlink
- CVE-2026-53797: prevent the sender from reading a file outside the
transfer the same way
- CVE-2026-53800: prevent --remove-source-files from deleting a file
outside the transfer the same way
Updated packages:
-
rsync-3.1.2-12.0.5.el7_9.tuxcare.els2.i686.rpm
sha:1f57357d606614bc3076c6544c2599c90c5bd3559983c2c9d4c71a4e6c88f95a
-
rsync-3.1.2-12.0.5.el7_9.tuxcare.els2.x86_64.rpm
sha:a1117d62ee600abb7ced11e5764d6936dc87908e50a678a83f7a599cb26ed4b9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
