Release date:
2026-11-03 18:54:51 UTC
Description:
- CVE-2026-70456: make room for the trailing NULL in read_args() so a
crafted daemon argument list cannot write one slot past the argv
allocation
- CVE-2026-53785: create the implied parent directories of a --relative
transfer without following a symlinked parent component on any
non-sender receiver, not only a non-chrooted daemon
Updated packages:
-
rsync-3.0.6-12.el6.tuxcare.els15.i686.rpm
sha:d4b45c4e33722a0099e867631a8cd12bc54cd98a4947c757d994c5b3facde7cd
-
rsync-3.0.6-12.el6.tuxcare.els15.x86_64.rpm
sha:a00a9d1b07b7f263e09146e177e4074dde9177b93a73e2b93e1cf20d31a7788b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
