[CLSA-2026:1789745757] Fix CVE(s): CVE-2026-70456
Type:
security
Severity:
Important
Release date:
2026-09-18 15:36:08 UTC
Description:
* SECURITY UPDATE: Out-of-bounds NULL write in daemon argument parsing - debian/patches/CVE-2026-70456.patch: grow argv to reserve the trailing NULL slot before read_args() stores it in io.c - CVE-2026-70456
CVEs fixed:
Updated packages:
  • rsync_3.1.3-8ubuntu0.9+tuxcare.els12_amd64.deb
    sha:0b7b48b55299f5682658b2ad4db4f3fa4c72916c
  • rsync_3.1.3-8ubuntu0.9+tuxcare.els12_arm64.deb
    sha:a72e5a07b649ef921d642155b41998da47c3c789
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.