[CLSA-2026:1792576195] Fix CVE(s): CVE-2026-53783
Type:
security
Severity:
Important
Release date:
2026-10-21 09:50:06 UTC
Description:
* SECURITY UPDATE: rrsync restricted directory escape via symlinks - debian/patches/CVE-2026-53783.patch: replace the Perl rrsync with upstream's path-pinning python3 rrsync without the 3.2.4 single-run lock, add receiver-only --drop-D - debian/control: depend on python3 for /usr/bin/rrsync - CVE-2026-53783
CVEs fixed:
Updated packages:
  • rsync_3.1.3-8ubuntu0.9+tuxcare.els13_amd64.deb
    sha:b45fddf946848a6d17d8fc18eed768e18400f377
  • rsync_3.1.3-8ubuntu0.9+tuxcare.els13_arm64.deb
    sha:a0d4a256e2ce437e834cc8a404b5888df76dc42b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.