CLSA-2026-1789579702
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1789579702.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1789579702
- Upstream
- Published
- 2026-09-16T17:28:33Z
- Modified
- 2026-10-26T09:31:50Z
- Summary
- rsync: Fix of CVE-2026-70456
- Details
-
- CVE-2026-70456: heap out-of-bounds write in the daemon read_args() because the post-dot argv growth path (glob_expand()/glob_match()) reserved room only for the entry being added, so a request line landing argc on exactly maxargs made the trailing argv[argc] = NULL an 8-byte write one slot past the allocation; the +1 slot is now ensured before the store
- References
Affected packages
TuxCare:CentOS:8.4 / rsync
Package
- Name
- rsync
- Purl
- pkg:rpm/tuxcare/rsync?distro=centos-8.4