[CLSA-2026:1792411866] rsync: Fix of CVE-2026-70461
Type:
security
Severity:
Critical
Release date:
2026-10-19 12:11:17 UTC
Description:
- CVE-2026-70461: heap out-of-bounds write in add_implied_include() -- trailing backslash not counted when sizing the implied-include rule
CVEs fixed:
Updated packages:
  • rsync-3.1.3-12.el8_4.tuxcare.els18.i686.rpm
    sha:9b10b7df02187602bd95f26c006c6764dfe990126432aaa9abf52abea82a04c2
  • rsync-3.1.3-12.el8_4.tuxcare.els18.x86_64.rpm
    sha:88b91dad4b71c353be5ca6f54843066e1c1bc838a0461badf361d850483bb98f
  • rsync-daemon-3.1.3-12.el8_4.tuxcare.els18.noarch.rpm
    sha:8d271a8b90e5a18db4bb2c3de8f3e0ed67083a73a4374977575c24f6f5b98a9a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.