CLSA-2026-1789662743
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1789662743.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1789662743
- Upstream
- Published
- 2026-09-17T16:32:38Z
- Modified
- 2026-10-26T09:32:02Z
- Summary
- Fix of 6 CVEs
- Details
-
- SECURITY UPDATE: shell metacharacter injection via daemon config hooks and RSYNC_CONNECT_PROG
- debian/patches/CVE-2026-53790.patch: backport the upstream fix
- CVE-2026-53790
- SECURITY UPDATE: daemon inner-chroot module path escape in the /./ handling
- debian/patches/CVE-2026-53793.patch: backport the upstream fix
- CVE-2026-53793
- SECURITY UPDATE: unbounded hash chain walk in hash_search()
- debian/patches/CVE-2026-70453.patch: backport the upstream fix
- CVE-2026-70453
- SECURITY UPDATE: out-of-bounds F_SUM read in hard_link_check()
- debian/patches/CVE-2026-70458.patch: backport the upstream fix
- CVE-2026-70458
- SECURITY UPDATE: I/O timeout bypass via MSG_IO_TIMEOUT
- debian/patches/CVE-2026-70462.patch: backport the upstream fix
- CVE-2026-70462
- SECURITY UPDATE: unbounded pre-transfer handshake in start_daemon()
- debian/patches/CVE-2026-70464.patch: backport the upstream fix
- CVE-2026-70464
- SECURITY UPDATE: shell metacharacter injection via daemon config hooks and RSYNC_CONNECT_PROG
- References
-
- https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1789662743.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-53790
- https://nvd.nist.gov/vuln/detail/CVE-2026-53793
- https://nvd.nist.gov/vuln/detail/CVE-2026-70453
- https://nvd.nist.gov/vuln/detail/CVE-2026-70458
- https://nvd.nist.gov/vuln/detail/CVE-2026-70462
- https://nvd.nist.gov/vuln/detail/CVE-2026-70464