Release date:
2026-10-15 13:56:44 UTC
Description:
- CVE-2026-53801: prevent the sender from listing a directory outside the
transfer through a path component swapped for a symlink
- CVE-2026-53797: prevent the sender from reading a file outside the
transfer the same way
- CVE-2026-53800: prevent --remove-source-files from deleting a file
outside the transfer the same way
Updated packages:
-
rsync-3.0.6-12.el6.tuxcare.els13.i686.rpm
sha:1be5f7b8e27cda9d77275c48dbd8c96ac3ded84dca9d3a54170138cd435cc172
-
rsync-3.0.6-12.el6.tuxcare.els13.x86_64.rpm
sha:94966be5fa73df73c7eab74fb0bf1a17788bb57f212bf58028f1f0f898efcc83
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.