[CLSA-2026:1793613201] Fix CVE(s): CVE-2026-82251, CVE-2026-82252, CVE-2026-82253
Type:
security
Severity:
Moderate
Release date:
2026-11-02 09:53:38 UTC
Description:
* SECURITY UPDATE: submodule name path traversal in vendored gix crate - debian/patches/CVE-2026-82251-CVE-2026-82253.patch: validate names in gix - CVE-2026-82251 * SECURITY UPDATE: .gitmodules symlink followed in vendored gix crate - debian/patches/CVE-2026-82252.patch: ignore a symlinked .gitmodules - CVE-2026-82252 * SECURITY UPDATE: submodule name check bypass in vendored gix-validate crate - debian/patches/CVE-2026-82251-CVE-2026-82253.patch: reject any .. part - CVE-2026-82253
CVEs fixed:
Updated packages:
  • cargo1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:f7f04884fa777d708ac455bd234e78afce663f0c
  • cargo1.89-doc_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:b66bd00d1a97280acc281a1f0cf9fc6a39470011
  • libstd-rust1.89-1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:92992aeaf30789e9c5833b5ff72fb0496ad307bd
  • libstd-rust1.89-dev_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:0bd533d5100f74a6d0d55661fabcadee164ba406
  • rust1.89-all_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:95bec3010ab24ef527f1421801d945557c409c7f
  • rust1.89-analyzer_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:c15c801d08b71223d49f371fea34e24187b6c8d3
  • rust1.89-clippy_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:80d6201518d25b4e7cf5afcb98da462725e043fb
  • rust1.89-doc_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:c47c0d51420f86bcfb0fbc0bba9bc63fecbce862
  • rust1.89-gdb_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:362ca69683f41b401f1b3fb67d8864ca1ff578ac
  • rust1.89-lldb_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:5e992a4d7909447c5c8d5a1c72f924746f1512b9
  • rust1.89-llvm_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:7edec85b80d5673d8e56aaa08f3252e23d259040
  • rust1.89-src_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:f4f4843563cffc76eb21ade5869d91e6fdf63010
  • rustc1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:1475cc36da4d448278585ca98c2d9b9cf12abbfd
  • rustfmt1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:339e67e0834a42e8e1d43b1adc8e056d08aba0ac
  • cargo1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:050f1ce12decffd40575f186f6c2fc0fb767b738
  • libstd-rust1.89-1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:a3813bd5baa1fae719eae91ffe257bf88a1a8659
  • libstd-rust1.89-dev_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:1f034df25dad84f5627e7981539b8dd68e1e5765
  • rust1.89-analyzer_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:6f52ed9d34d00a494fd4bee60ab3a0e3425f8fd9
  • rust1.89-clippy_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:8c6cff08c16725df107b90e29a934831a59ed2d1
  • rust1.89-llvm_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:2870e815e138aa85ff42eb1d738a1f23b46ad693
  • rustc1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:03a0fcb23fc31437b29ddc78dffb5efe29d54bf8
  • rustfmt1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:db61c13da788e96d23e49bbdcf18e244797afff7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.