[CLSA-2026:1794009276] rsync: Fix of CVE-2026-70452
Type:
security
Severity:
Important
Release date:
2026-11-07 00:26:15 UTC
Description:
- CVE-2026-70452: fail closed when a "hosts deny" hostname token cannot be resolved, instead of treating it as a non-match and admitting the host
CVEs fixed:
Updated packages:
  • rsync-3.1.2-12.0.5.el7_9.tuxcare.els7.i686.rpm
    sha:388b184b24b465dce9c18e3e89b9cbbd5b65dd513ccd2241bcf6ed83c982afd6
  • rsync-3.1.2-12.0.5.el7_9.tuxcare.els7.x86_64.rpm
    sha:4b8e54de70a803742806dcd4f427592a489b9d9db9d62800fe5184ca20c4ce84
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.