CLSA-2026-1788531150
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1788531150.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1788531150
- Upstream
- Published
- 2026-09-04T14:12:40Z
- Modified
- 2026-10-26T09:31:40Z
- Summary
- Fix CVE(s): CVE-2026-53789
- Details
-
- SECURITY UPDATE: arbitrary file deletion via malicious file list
- debian/patches/CVE-2026-53789.patch: keep synthetic and legacy implied parent directories non-content in exclude.c, flist.c so a malicious sender cannot forge the transfer-root entry as a content directory and expand a scoped --delete beyond the requested path; additionally reject a non-directory transfer-root entry in flist.c so a forged "." file entry cannot be used with --force to recursively wipe the destination
- CVE-2026-53789
- SECURITY UPDATE: arbitrary file deletion via malicious file list
- References