[CLSA-2026:1783629021] Fix CVE(s): CVE-2026-33056
Type:
security
Severity:
Moderate
Release date:
2026-07-09 20:30:40 UTC
Description:
* SECURITY UPDATE: symlink-directory collision chmod attack in vendored tar crate - debian/patches/vendor/CVE-2026-33056.patch: use fs::symlink_metadata() in unpack_dir so a symlink colliding with a later directory entry is not followed, preventing permission changes on directories outside the extraction path - CVE-2026-33056
CVEs fixed:
Updated packages:
  • cargo1.85_1.85.0+dfsg3-1+tuxcare.els5_amd64.deb
    sha:864c33233e790179a107a7afdf261eafdd7f8a6e
  • cargo1.85-doc_1.85.0+dfsg3-1+tuxcare.els5_all.deb
    sha:82937efa337b958e97d309e90967ecd7fe1c7aa2
  • libstd-rust1.85-1.85_1.85.0+dfsg3-1+tuxcare.els5_amd64.deb
    sha:8a1b967843432d1504d31dadf10bfd625fa46d76
  • libstd-rust1.85-dev_1.85.0+dfsg3-1+tuxcare.els5_amd64.deb
    sha:fb78764f0314f5cc52973b631125f10b3627485b
  • rust1.85-all_1.85.0+dfsg3-1+tuxcare.els5_all.deb
    sha:113d8046f0b9cc56fb83910928024055136b902f
  • rust1.85-analyzer_1.85.0+dfsg3-1+tuxcare.els5_amd64.deb
    sha:eb2688fe3ea2d8ca861057a9561944f933550b95
  • rust1.85-clippy_1.85.0+dfsg3-1+tuxcare.els5_amd64.deb
    sha:6f64b2d34dd29b4fb27a165aa9a8a4b263d1c4e1
  • rust1.85-doc_1.85.0+dfsg3-1+tuxcare.els5_all.deb
    sha:beed046d4e82c685676b948cd7ece7620bc3aae6
  • rust1.85-gdb_1.85.0+dfsg3-1+tuxcare.els5_all.deb
    sha:ecc499772a6a158dc18351912dbf5e934b480f68
  • rust1.85-lldb_1.85.0+dfsg3-1+tuxcare.els5_all.deb
    sha:0e56c4063bbc238ae9572495b8bd1669245217e9
  • rust1.85-llvm_1.85.0+dfsg3-1+tuxcare.els5_amd64.deb
    sha:a21354f86ce26c2e53c6d63bb3ef71048fcdd061
  • rust1.85-src_1.85.0+dfsg3-1+tuxcare.els5_all.deb
    sha:f7b572b8db737d046ff1a0be133ad4afc3ac879d
  • rustc1.85_1.85.0+dfsg3-1+tuxcare.els5_amd64.deb
    sha:9d78de5cd7719d0d3a2dd616706bba70ee8f5b27
  • rustfmt1.85_1.85.0+dfsg3-1+tuxcare.els5_amd64.deb
    sha:ad3e662421e57ab1dc657c34353dee10819c6e55
  • cargo1.85_1.85.0+dfsg3-1+tuxcare.els5_arm64.deb
    sha:c92abae1efacedc82fa8d6ebeab798922cfe9b67
  • cargo1.85-doc_1.85.0+dfsg3-1+tuxcare.els5_all.deb
    sha:82937efa337b958e97d309e90967ecd7fe1c7aa2
  • libstd-rust1.85-1.85_1.85.0+dfsg3-1+tuxcare.els5_arm64.deb
    sha:edaaba4595e7bf874c8fd246be8336b615cab399
  • libstd-rust1.85-dev_1.85.0+dfsg3-1+tuxcare.els5_arm64.deb
    sha:89af6d5bd0617e1b7ed922d7b4749bc76854fb5d
  • rust1.85-all_1.85.0+dfsg3-1+tuxcare.els5_all.deb
    sha:113d8046f0b9cc56fb83910928024055136b902f
  • rust1.85-analyzer_1.85.0+dfsg3-1+tuxcare.els5_arm64.deb
    sha:12cf34d1e05f4a11114eaf64c03afbfc6ae30c76
  • rust1.85-clippy_1.85.0+dfsg3-1+tuxcare.els5_arm64.deb
    sha:04e9b2385b7a4aa0c400e2111dfb91c698a8864e
  • rust1.85-doc_1.85.0+dfsg3-1+tuxcare.els5_all.deb
    sha:8a78b504aff2ec80c8f415425177e3d18eb9eeee
  • rust1.85-gdb_1.85.0+dfsg3-1+tuxcare.els5_all.deb
    sha:ecc499772a6a158dc18351912dbf5e934b480f68
  • rust1.85-lldb_1.85.0+dfsg3-1+tuxcare.els5_all.deb
    sha:0e56c4063bbc238ae9572495b8bd1669245217e9
  • rust1.85-llvm_1.85.0+dfsg3-1+tuxcare.els5_arm64.deb
    sha:62197fe4635119f138eb8ed052e48324e6223b41
  • rust1.85-src_1.85.0+dfsg3-1+tuxcare.els5_all.deb
    sha:f7b572b8db737d046ff1a0be133ad4afc3ac879d
  • rustc1.85_1.85.0+dfsg3-1+tuxcare.els5_arm64.deb
    sha:d1ecbd68a37ffdd3fc6f7aca3f1b4df95eeecd95
  • rustfmt1.85_1.85.0+dfsg3-1+tuxcare.els5_arm64.deb
    sha:7ee12712019913cf25fedb2fdf9dcbd874aafb2b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.