CLSA-2026-1780480701
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1780480701.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1780480701
- Upstream
- Published
- 2026-06-03T09:58:34Z
- Modified
- 2026-10-26T09:30:16Z
- Summary
- rsync: Fix of CVE-2026-29518
- Details
-
- CVE-2026-29518: fix daemon-no-chroot TOCTOU on parent path components by routing both the sender read-path (sender.c) and the receiver write-path (receiver.c open_tmpfile and recv_files inplace branch) through secure_relative_open() / secure_mkstemp() from the trusted module root, and add regression test (chdir-symlink-race.test case 4)
- References
Affected packages
TuxCare:AlmaLinux:9.2 / rsync
Package
- Name
- rsync
- Purl
- pkg:rpm/tuxcare/rsync?distro=almalinux-9.2