Release date:
2026-10-08 23:06:00 UTC
Description:
- CVE-2026-53802: open the daemon secrets file, the client --password-file,
--files-from and the --filter merge / per-directory merge files refusing
attacker-planted symlinks -- confined beneath the module root on a daemon,
owner-trust walk otherwise; getpassf() fstat()s the opened fd, not the path
Updated packages:
-
rsync-3.1.2-12.0.1.el7_9.tuxcare.els17.i686.rpm
sha:4eb7faf6acd28b26f38664572edfc5dfe3464e2084d4be4713df0a48798a57f1
-
rsync-3.1.2-12.0.1.el7_9.tuxcare.els17.x86_64.rpm
sha:bb9d73a1f9e87963484ecdd3d4121c23ea3c1d8a3fcd5170bdf50767b53254d8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
