Release date:
2026-10-14 10:04:03 UTC
Description:
- CVE-2026-53801: extend the fix to the sender outside a daemon: prevent
it from listing a directory outside the transfer through a path
component swapped for a symlink
- CVE-2026-53797: prevent the sender from reading a file outside the
transfer the same way
- CVE-2026-53800: prevent --remove-source-files from deleting a file
outside the transfer the same way
Updated packages:
-
rsync-3.1.2-12.0.5.el7_9.tuxcare.els2.i686.rpm
sha:4fc24fb0441876f25da560e073a5609677f1a053a41838b0335f42b4ed5327d2
-
rsync-3.1.2-12.0.5.el7_9.tuxcare.els2.x86_64.rpm
sha:cd651e79de62e271d08a06fa8600fd649dbdf753f4bf69a3d07d77b8de85df19
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
