[CLSA-2026:1792734884] rsync: Fix of CVE-2026-70461
Type:
security
Severity:
Critical
Release date:
2026-10-23 16:38:11 UTC
Description:
- CVE-2026-70461: fix a one-byte heap overflow on a filter argument ending in a backslash, which add_implied_include() did not count when sizing the rule pattern
CVEs fixed:
Updated packages:
  • rsync-3.1.2-12.0.5.el7_9.tuxcare.els6.i686.rpm
    sha:c505b279d202e2dc7f9d091b1caebac1ea5203fd56c96e7d0c300e6c3d874a8c
  • rsync-3.1.2-12.0.5.el7_9.tuxcare.els6.x86_64.rpm
    sha:f26da9c26e11d15cf5254ed46ca138a3fb3a8ff550e74c8563aa4d58865ed2ba
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.