[CLSA-2026:1792580766] rsync: Fix of CVE-2026-70461
Type:
security
Severity:
Critical
Release date:
2026-10-21 11:06:17 UTC
Description:
- CVE-2026-70461: fix a one-byte heap overflow on a filter argument ending in a backslash, which add_implied_include() did not count when sizing the rule pattern
CVEs fixed:
Updated packages:
  • rsync-3.1.2-12.0.5.el7_9.tuxcare.els6.i686.rpm
    sha:1d4014eb659e249a6b2195687286605f72956f676614b243ae25a193fa4a2a7f
  • rsync-3.1.2-12.0.5.el7_9.tuxcare.els6.x86_64.rpm
    sha:df3d02a4fbd770c9bc0d4ab35769d79162be842904cf1ebe306e0c20ac9f3fa5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.