Release date:
2026-10-09 14:57:57 UTC
Description:
- CVE-2026-53802: open the daemon secrets file, the client --password-file,
--files-from and the --filter merge / per-directory merge files refusing
attacker-planted symlinks -- confined beneath the module root on a daemon,
owner-trust walk otherwise; getpassf() fstat()s the opened fd, not the path
Updated packages:
-
rsync-3.1.2-12.0.1.el7_9.tuxcare.els17.aarch64.rpm
sha:fe7810b93ed1bb9db03ec7e596f63f01b77cb9eb0884b27694e1c1500c24314d
-
rsync-3.1.2-12.0.1.el7_9.tuxcare.els17.i686.rpm
sha:c9a10fd40f829be35aefa323342c3cf5697b5e5794c35392d30c201e8d887b20
-
rsync-3.1.2-12.0.1.el7_9.tuxcare.els17.x86_64.rpm
sha:eb051b9cb51c417ae5df9448de111111d0b181b4f71f1c386d1c28cea6a9d1bc
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
