Release date:
2026-09-16 14:53:04 UTC
Description:
* SECURITY UPDATE: path traversal when creating intermediate directories
- debian/patches/CVE-2026-53785.patch: add do_mkdir_at() in syscall.c and
route make_path() through it, so each missing directory is created
relative to a parent walked one component at a time with O_NOFOLLOW
instead of a plain mkdir() on the full path
- CVE-2026-53785
Updated packages:
-
rsync_3.1.3-8ubuntu0.9+tuxcare.els10_amd64.deb
sha:438c38a7361e95f1877abf6580cb519fe1f2b9ae
-
rsync_3.1.3-8ubuntu0.9+tuxcare.els10_arm64.deb
sha:a4419a53f0f32b61dca1c06a034953a32538275d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
