Release date:
2026-10-08 23:04:19 UTC
Description:
- CVE-2026-53802: open the daemon secrets file, the client --password-file,
--files-from and the --filter merge / per-directory merge files refusing
attacker-planted symlinks -- confined beneath the module root on a daemon,
owner-trust walk otherwise; getpassf() fstat()s the opened fd, not the path
Updated packages:
-
rsync-3.1.2-12.0.1.el7_9.tuxcare.els17.i686.rpm
sha:306aa4a202410b5e4989b70c7656ec31f91039c00c5d7bab53b191cd5b140085
-
rsync-3.1.2-12.0.1.el7_9.tuxcare.els17.x86_64.rpm
sha:f8eaf88da71373cca1ccec39758871aa15b52991a35aa24f54132202804da268
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
