{ "document": { "aggregate_severity": { "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-29518: re-implement the \"use chroot = no\" confinement after the\n centos7els fix: every path operation proves its parent directory beneath\n the pinned module root through /proc/self/fd and runs on it with the\n *at() calls. In-module symlinks, directories the daemon uid may search\n but not read, -L/-K and --link-dest=../dir keep working; xattrs, ACLs and\n timestamps are confined too. Drop CVE-2026-29518-2.patch\n- CVE-2026-43619: chmod no longer follows a leaf symlink; CVE-2026-29518:\n confined calls act on the resolved object with O_NOFOLLOW\n- CVE-2026-29518: anchor the receiver's basis open at the pinned working\n directory and prove it beneath the module, not beneath a root resolved\n by name\n- CVE-2026-53784, CVE-2026-53786, CVE-2026-53793: re-anchor on the\n re-implemented CVE-2026-29518 confinement", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791908277", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791908277" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/centos6els/advisories/2026/clsa-2026_1791908277.json" } ], "tracking": { "current_release_date": "2026-10-20T16:21:07Z", "generator": { "date": "2026-10-20T16:21:07Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1791908277", "initial_release_date": "2026-10-13T16:17:59Z", "revision_history": [ { "date": "2026-10-13T16:17:59Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-20T16:21:07Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "rsync: Fix of CVE-2026-43619" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Community Enterprise Operating System 6", "product": { "name": "Community Enterprise Operating System 6", "product_id": "CentOS-6", "product_identification_helper": { "cpe": "cpe:2.3:o:centos:centos:6:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Community Enterprise Operating System" } ], "category": "vendor", "name": "Red Hat, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "rsync-0:3.0.6-12.el6.tuxcare.els12.i686", "product": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els12.i686", "product_id": "rsync-0:3.0.6-12.el6.tuxcare.els12.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/rsync@3.0.6-12.el6.tuxcare.els12?arch=i686" } } }, { "category": "product_version", "name": "rsync-0:3.0.6-12.el6.tuxcare.els11.i686", "product": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els11.i686", "product_id": "rsync-0:3.0.6-12.el6.tuxcare.els11.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/rsync@3.0.6-12.el6.tuxcare.els11?arch=i686" } } }, { "category": "product_version", "name": "rsync-0:3.0.6-12.el6.tuxcare.els10.i686", "product": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els10.i686", "product_id": "rsync-0:3.0.6-12.el6.tuxcare.els10.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/rsync@3.0.6-12.el6.tuxcare.els10?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "rsync-0:3.0.6-12.el6.tuxcare.els12.x86_64", "product": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els12.x86_64", "product_id": "rsync-0:3.0.6-12.el6.tuxcare.els12.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/rsync@3.0.6-12.el6.tuxcare.els12?arch=x86_64" } } }, { "category": "product_version", "name": "rsync-0:3.0.6-12.el6.tuxcare.els11.x86_64", "product": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els11.x86_64", "product_id": "rsync-0:3.0.6-12.el6.tuxcare.els11.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/rsync@3.0.6-12.el6.tuxcare.els11?arch=x86_64" } } }, { "category": "product_version", "name": "rsync-0:3.0.6-12.el6.tuxcare.els10.x86_64", "product": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els10.x86_64", "product_id": "rsync-0:3.0.6-12.el6.tuxcare.els10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/rsync@3.0.6-12.el6.tuxcare.els10?arch=x86_64" } } }, { "category": "product_version", "name": "rsync-0:3.0.6-12.el6.tuxcare.els9.x86_64", "product": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els9.x86_64", "product_id": "rsync-0:3.0.6-12.el6.tuxcare.els9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/rsync@3.0.6-12.el6.tuxcare.els9?arch=x86_64" } } }, { "category": "product_version", "name": "rsync-0:3.0.6-12.el6.tuxcare.els8.x86_64", "product": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els8.x86_64", "product_id": "rsync-0:3.0.6-12.el6.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/rsync@3.0.6-12.el6.tuxcare.els8?arch=x86_64" } } }, { "category": "product_version", "name": "rsync-0:3.0.6-12.el6.tuxcare.els7.x86_64", "product": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els7.x86_64", "product_id": "rsync-0:3.0.6-12.el6.tuxcare.els7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/rsync@3.0.6-12.el6.tuxcare.els7?arch=x86_64" } } }, { "category": "product_version", "name": "rsync-0:3.0.6-12.el6.tuxcare.els6.x86_64", "product": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els6.x86_64", "product_id": "rsync-0:3.0.6-12.el6.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/rsync@3.0.6-12.el6.tuxcare.els6?arch=x86_64" } } }, { "category": "product_version", "name": "rsync-0:3.0.6-12.el6.tuxcare.els5.x86_64", "product": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els5.x86_64", "product_id": "rsync-0:3.0.6-12.el6.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/rsync@3.0.6-12.el6.tuxcare.els5?arch=x86_64" } } }, { "category": "product_version", "name": "rsync-0:3.0.6-12.el6.tuxcare.els4.x86_64", "product": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els4.x86_64", "product_id": "rsync-0:3.0.6-12.el6.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/rsync@3.0.6-12.el6.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "rsync-0:3.0.6-12.el6.tuxcare.els3.x86_64", "product": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els3.x86_64", "product_id": "rsync-0:3.0.6-12.el6.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/rsync@3.0.6-12.el6.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "rsync-0:3.0.6-12.el6.tuxcare.els2.x86_64", "product": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els2.x86_64", "product_id": "rsync-0:3.0.6-12.el6.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/rsync@3.0.6-12.el6.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "rsync-0:3.0.6-12.el6.tuxcare.els1.x86_64", "product": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els1.x86_64", "product_id": "rsync-0:3.0.6-12.el6.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/rsync@3.0.6-12.el6.tuxcare.els1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els12.i686 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els12.i686" }, "product_reference": "rsync-0:3.0.6-12.el6.tuxcare.els12.i686", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els12.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els12.x86_64" }, "product_reference": "rsync-0:3.0.6-12.el6.tuxcare.els12.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els11.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els11.x86_64" }, "product_reference": "rsync-0:3.0.6-12.el6.tuxcare.els11.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els11.i686 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els11.i686" }, "product_reference": "rsync-0:3.0.6-12.el6.tuxcare.els11.i686", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els10.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els10.x86_64" }, "product_reference": "rsync-0:3.0.6-12.el6.tuxcare.els10.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els10.i686 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els10.i686" }, "product_reference": "rsync-0:3.0.6-12.el6.tuxcare.els10.i686", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els9.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els9.x86_64" }, "product_reference": "rsync-0:3.0.6-12.el6.tuxcare.els9.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els8.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els8.x86_64" }, "product_reference": "rsync-0:3.0.6-12.el6.tuxcare.els8.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els7.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els7.x86_64" }, "product_reference": "rsync-0:3.0.6-12.el6.tuxcare.els7.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els6.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els6.x86_64" }, "product_reference": "rsync-0:3.0.6-12.el6.tuxcare.els6.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els5.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els5.x86_64" }, "product_reference": "rsync-0:3.0.6-12.el6.tuxcare.els5.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els4.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els4.x86_64" }, "product_reference": "rsync-0:3.0.6-12.el6.tuxcare.els4.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els3.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els3.x86_64" }, "product_reference": "rsync-0:3.0.6-12.el6.tuxcare.els3.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els2.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els2.x86_64" }, "product_reference": "rsync-0:3.0.6-12.el6.tuxcare.els2.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "rsync-0:3.0.6-12.el6.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els1.x86_64" }, "product_reference": "rsync-0:3.0.6-12.el6.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-6" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-43619", "cwe": { "id": "CWE-59", "name": "Improper Link Resolution Before File Access ('Link Following')" }, "notes": [ { "category": "description", "text": "Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system calls including chmod, lchown, utimes, rename, unlink, mkdir, symlink, mknod, link, rmdir, and lstat that allow local attackers to redirect operations to files outside the exported rsync module. Attackers with local filesystem access can exploit the timing window between path resolution and syscall execution by swapping symlinks to apply sender-supplied permissions, ownership, timestamps, or filenames to arbitrary files outside the intended module boundary on rsync daemons configured with 'use chroot = no'.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els12.i686", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els12.x86_64" ], "known_affected": [ "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els1.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els10.i686", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els10.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els11.i686", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els11.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els2.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els3.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els4.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els5.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els6.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els7.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els8.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-43619" }, { "category": "external", "summary": "https://github.com/RsyncProject/rsync/releases/tag/v3.4.3", "url": "https://github.com/RsyncProject/rsync/releases/tag/v3.4.3" }, { "category": "external", "summary": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-4h9m-w5ff-j735", "url": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-4h9m-w5ff-j735" }, { "category": "external", "summary": "https://www.vulncheck.com/advisories/rsync-symlink-race-condition-via-path-based-syscalls", "url": "https://www.vulncheck.com/advisories/rsync-symlink-race-condition-via-path-based-syscalls" } ], "release_date": "2026-05-20T02:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-13T16:17:59.059574Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791908277", "product_ids": [ "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els12.i686", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els12.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791908277" }, { "category": "none_available", "date": "2026-05-20T02:16:00Z", "details": "Affected", "product_ids": [ "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els1.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els10.i686", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els10.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els11.i686", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els11.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els2.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els3.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els4.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els5.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els6.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els7.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els8.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els1.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els10.i686", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els10.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els11.i686", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els11.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els2.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els3.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els4.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els5.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els6.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els7.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els8.x86_64", "CentOS-6:rsync-0:3.0.6-12.el6.tuxcare.els9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }