[CLSA-2026:1793613022] Fix CVE(s): CVE-2026-82251, CVE-2026-82252, CVE-2026-82253
Type:
security
Severity:
Moderate
Release date:
2026-11-02 09:50:36 UTC
Description:
* SECURITY UPDATE: submodule name path traversal in vendored gix crate - debian/patches/CVE-2026-82251-CVE-2026-82253.patch: validate names in gix - CVE-2026-82251 * SECURITY UPDATE: .gitmodules symlink followed in vendored gix crate - debian/patches/CVE-2026-82252.patch: ignore a symlinked .gitmodules - CVE-2026-82252 * SECURITY UPDATE: submodule name check bypass in vendored gix-validate crate - debian/patches/CVE-2026-82251-CVE-2026-82253.patch: reject any .. part - CVE-2026-82253
CVEs fixed:
Updated packages:
  • cargo1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:a36a49ba2ad018fe9e91abad077cdf58fb1a9610
  • cargo1.89-doc_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:237d670cd3244f96b1a0ec5a4207befa9bbde26d
  • libstd-rust1.89-1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:cb7becce9d33219817dc1b85cc457b294ac1c338
  • libstd-rust1.89-dev_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:834864f2c72498837bebe88d2e84dbaf7970921b
  • rust1.89-all_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:d2a5a917c2ebbb3b7531205f23b061ed9e7a558c
  • rust1.89-analyzer_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:a9330b6e2e08e0ceda2661e88e5a941d986f8027
  • rust1.89-clippy_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:2edcf0d3497b3befd1434273077f2e7bcd938859
  • rust1.89-doc_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:75af86d7c8379b66c5228b41da398a5e8ff5861c
  • rust1.89-gdb_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:77f178326eee55f7ef9f74909e52ba62240ec9da
  • rust1.89-lldb_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:188e7c1d27166c0836ef733963a63bfbd5417ab4
  • rust1.89-llvm_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:71bbb4c779e07af0ef4d879545e8dbd47dac814a
  • rust1.89-src_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_all.deb
    sha:184bdf1dd6b1c1671fb39fd7b4540577055a7053
  • rustc1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:053128371cd0f53c1dcd33fe694396aa33c1307d
  • rustfmt1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_amd64.deb
    sha:dd04f8e2a01bb4f2f9c00004e058953892b33c23
  • cargo1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:231a71b866e63e884efb88da26097dcb5951f385
  • libstd-rust1.89-1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:3c0945bea4db5eccacc0f8c231b78f9257a2953b
  • libstd-rust1.89-dev_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:b2fe43575dd025550e3645f50c4a4203d174f048
  • rust1.89-analyzer_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:36c1b5a321130a4ce4623b2ac6f4df9d6ab9b2ae
  • rust1.89-clippy_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:0f3643422ec16147f9175ffaddf5fb29a3cbb47c
  • rust1.89-llvm_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:9f895fdeaa4a6b45d619933cc7bbfdb4fca1b876
  • rustc1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:27f5db12ce62bdf776311672cc517b9730d613f3
  • rustfmt1.89_1.89.0+dfsg1-1~bpo13+2+tuxcare.els8_arm64.deb
    sha:c512ca5d10ca6d4ba0179e9dad84702f6dcc92f5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.