[CLSA-2026:1792425300] rsync: Fix of CVE-2026-70461
Type:
security
Severity:
Critical
Release date:
2026-10-19 15:55:11 UTC
Description:
- CVE-2026-70461: heap out-of-bounds write in add_implied_include() -- trailing backslash not counted when sizing the implied-include rule
CVEs fixed:
Updated packages:
  • rsync-3.1.3-19.el8.1.tuxcare.els12.i686.rpm
    sha:e607fd1e3567c61d9567631940a2a35b5a2000702c70927b41fe2b29b3d5ca28
  • rsync-3.1.3-19.el8.1.tuxcare.els12.x86_64.rpm
    sha:e65fd5b6cd016005ed509573c443092014b51c5ee105b198eaa59e39b765992c
  • rsync-daemon-3.1.3-19.el8.1.tuxcare.els12.noarch.rpm
    sha:15106297b70a61337be7011b664c17680a18aca46116b8efdd6d1e2ea97dbe3e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.