[CLSA-2026:1792581690] rsync: Fix of CVE-2026-70461
Type:
security
Severity:
Critical
Release date:
2026-10-21 11:21:40 UTC
Description:
- CVE-2026-70461: fix a one-byte heap overflow on a filter argument ending in a backslash, which add_implied_include() did not count when sizing the rule pattern
CVEs fixed:
Updated packages:
  • rsync-3.1.2-12.0.5.el7_9.tuxcare.els6.i686.rpm
    sha:919a3ec57de308196741d93c7e118dc4b77ed3dd7739715c7960502af45e3378
  • rsync-3.1.2-12.0.5.el7_9.tuxcare.els6.x86_64.rpm
    sha:e1076f977eaa0591deb48676d918005ceb95df80a522e488186a212af5df41d4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.