Release date:
2026-10-16 17:58:04 UTC
Description:
- CVE-2026-70460: confine a peer-supplied --partial-dir and --backup-dir on a
daemon module to the module root, so an in-module symlink can no longer
redirect partial-file or backup reads, writes, renames and unlinks outside
the module
Updated packages:
-
rsync-3.2.3-19.el9_2.tuxcare.els19.aarch64.rpm
sha:3f7bbb815d80f6fb2b3f59998d2a099488c71caf1df18975ae3f8bded118673b
-
rsync-3.2.3-19.el9_2.tuxcare.els19.i686.rpm
sha:62438a8115350432674d4547a273fcfb2541f42810afb883df4a559e4149f820
-
rsync-3.2.3-19.el9_2.tuxcare.els19.x86_64.rpm
sha:b2f2bb7ad3401c987bdbb4e8b1d4c2ca122c3c20625c54335c3e0a7fd0be5497
-
rsync-daemon-3.2.3-19.el9_2.tuxcare.els19.noarch.rpm
sha:036994d8ad8009e8791cd6d9d6926049c056a40d95ea0426e0294b447c44eb9c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
