Release date:
2026-09-07 21:21:12 UTC
Description:
- CVE-2026-53784: confine the daemon module-root chdir under "use chroot = no"
by resolving the path with a new safe_open_no_attacker_symlinks() walk that
refuses any symlink component not owned by uid 0 or our euid, so a planted
symlink at the module path can no longer redirect the daemon's CWD outside
the module root (path traversal)
Updated packages:
-
rsync-3.1.3-12.el8.tuxcare.els13.x86_64.rpm
sha:e3dc757537211e43bc65ce24b3b9d0fdb837a8fdffe07c9eeb5426220df7dabd
-
rsync-daemon-3.1.3-12.el8.tuxcare.els13.noarch.rpm
sha:97e7f94a08812f6e41c603e84f82706c04ef2116c40cb0ff0109652e96cfce05
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
