Release date:
2026-10-14 10:04:59 UTC
Description:
- CVE-2026-53801: extend the fix to the sender outside a daemon: prevent
it from listing a directory outside the transfer through a path
component swapped for a symlink
- CVE-2026-53797: prevent the sender from reading a file outside the
transfer the same way
- CVE-2026-53800: prevent --remove-source-files from deleting a file
outside the transfer the same way
Updated packages:
-
rsync-3.1.2-12.0.5.el7_9.tuxcare.els2.aarch64.rpm
sha:56802b6773e6548f00d572ecc1c2ff07a6c2621f26a4d2b3e922b6233ad4812d
-
rsync-3.1.2-12.0.5.el7_9.tuxcare.els2.i686.rpm
sha:897055c917925767ac3b5dd7f7371bec7977746b0655cad932391716017d9bfc
-
rsync-3.1.2-12.0.5.el7_9.tuxcare.els2.x86_64.rpm
sha:6572ab365851bb0e54d1fa46bb69f4a507a1241da2efb2c3aa1243bf58db1c8b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
