Release date:
2026-11-10 16:45:48 UTC
Description:
* SECURITY UPDATE: unbounded hash_search() collision work
- debian/patches/CVE-2026-119741.patch: unlink duplicate chain entries
and skip a block after repeated colliding offsets in match.c, so a
crafted checksum set cannot drive excessive sender CPU use in the
delta matcher
- CVE-2026-119741
Updated packages:
-
rsync_3.2.3-4+deb11u4+tuxcare.els8_amd64.deb
sha:5521e3cd649b0000e629358d0af742a7f8d1c0f3
-
rsync_3.2.3-4+deb11u4+tuxcare.els8_arm64.deb
sha:9cbd43e1442064d6ba9b4e6ed91b3029f2a06ada
-
rsync_3.2.3-4+deb11u4+tuxcare.els8_armel.deb
sha:f4b86a55360ae7aa7fc545112a129906757328d7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
