[CLSA-2026:1793609492] Fix CVE(s): CVE-2026-82251, CVE-2026-82252, CVE-2026-82253
Type:
security
Severity:
Moderate
Release date:
2026-11-02 08:51:49 UTC
Description:
* SECURITY UPDATE: submodule name path traversal in vendored gix crate - debian/patches/CVE-2026-82251-CVE-2026-82253.patch: validate names in gix - CVE-2026-82251 * SECURITY UPDATE: .gitmodules symlink followed in vendored gix crate - debian/patches/CVE-2026-82252.patch: ignore a symlinked .gitmodules - CVE-2026-82252 * SECURITY UPDATE: submodule name check bypass in vendored gix-validate crate - debian/patches/CVE-2026-82251-CVE-2026-82253.patch: reject any .. part - CVE-2026-82253
CVEs fixed:
Updated packages:
  • cargo1.86_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:e131d014113d9e22e69a938cb26a200df3772bc5
  • cargo1.86-doc_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:04fc48e819e4dcce185d9a3e180a8611c04db402
  • libstd-rust1.86-1.86_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:06d1c4590cba4a9ad7767576edabd59f5fb971fc
  • libstd-rust1.86-dev_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:4852bdb545a0789c811db8d47f61993aef77002c
  • rust1.86-all_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:00e67c51dad89eb3a0d61fb5560f23037f21a571
  • rust1.86-analyzer_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:e35a84984c52b2174a50b3287b349e81f32f481f
  • rust1.86-clippy_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:c5a4bc55932b9886bff61326c74a2907bf6f0728
  • rust1.86-doc_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:638a01f6eb43e3722f22b83b57b82fb31184ab90
  • rust1.86-gdb_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:fc1ae4e3b92411e0f15dc80c4889fa7c70137b85
  • rust1.86-lldb_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:c2eef549c14a4d89f1d9b16afd0f7179261d883f
  • rust1.86-llvm_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:dbe545ea256bb1f31df0337e94f0505aa6d0dd51
  • rust1.86-src_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:4581aabca2cec0b21181ea125becb80d58e0d67e
  • rustc1.86_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:78a3607576f83abb42ddc330813c730c0bcbdcea
  • rustfmt1.86_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:1451dd2469b76247ce69d7e9ccfa1ffd634596fa
  • cargo1.86_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:6189278e277ab7a4e0ffed01dfa5c469112a4cb0
  • libstd-rust1.86-1.86_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:47cbc2a478dfecfeb696425f414290686dc89cce
  • libstd-rust1.86-dev_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:38dcc1db81e30e6c28974ad0d42366f2141bd96d
  • rust1.86-analyzer_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:80b629cf957141e01b4e34552fa4ab7d6af554c5
  • rust1.86-clippy_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:5a38ea70388b59678d64d9a6a42f25a063f397e2
  • rust1.86-llvm_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:eab7ed451b0376e9dd66917d41c8d8592ee031b5
  • rustc1.86_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:08f0ea00a27b684ace8bd57df3253903811ede4e
  • rustfmt1.86_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:5782739be132927776e4e9dba0d389712da10844
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.