[CLSA-2026:1794494652] Fix CVE(s): CVE-2026-109518
Type:
security
Severity:
Important
Release date:
2026-11-12 14:44:24 UTC
Description:
* SECURITY UPDATE: Hard link reuse allows unverified package installation - debian/patches/CVE-2026-109518.patch: open target files exclusively in the acquire methods - CVE-2026-109518
CVEs fixed:
Updated packages:
  • apt_1.8.2.3+tuxcare.els1_amd64.deb
    sha:c4028d6c2f77d38f3a6513645f09924feabd8a68
  • apt-doc_1.8.2.3+tuxcare.els1_all.deb
    sha:29c0582b73c92b932ca4adbc864abf9dfbff0a7a
  • apt-transport-https_1.8.2.3+tuxcare.els1_all.deb
    sha:12af150989e0d742931445f27db987e97b044411
  • apt-utils_1.8.2.3+tuxcare.els1_amd64.deb
    sha:3bbea447ca488da0d89d8d9e4f0085005f072cf0
  • libapt-inst2.0_1.8.2.3+tuxcare.els1_amd64.deb
    sha:5cee14a08bbf977b01b633b11382c97237fa9857
  • libapt-pkg-dev_1.8.2.3+tuxcare.els1_amd64.deb
    sha:78f439e5f5cdd85b7264965c040d0a434020b8f1
  • libapt-pkg-doc_1.8.2.3+tuxcare.els1_all.deb
    sha:58d4096b47c76c37f938f00496d894e8133b71da
  • libapt-pkg5.0_1.8.2.3+tuxcare.els1_amd64.deb
    sha:d9d579d73265292b205e741a509343ff40eacfa4
  • apt_1.8.2.3+tuxcare.els1_arm64.deb
    sha:932f21e364e09f7fc21c182f951ed0a2a5fbcf12
  • apt-utils_1.8.2.3+tuxcare.els1_arm64.deb
    sha:5f706a5512612de93c39c34cc968120983d5e9c9
  • libapt-inst2.0_1.8.2.3+tuxcare.els1_arm64.deb
    sha:efecc553313574008f99d6daae1c512705dca500
  • libapt-pkg-dev_1.8.2.3+tuxcare.els1_arm64.deb
    sha:2e59649c3386a7f16fc2604d3f0f678d0766719b
  • libapt-pkg5.0_1.8.2.3+tuxcare.els1_arm64.deb
    sha:cb065bff422704b5a1527cd54aea6e3b27ff3550
  • apt_1.8.2.3+tuxcare.els1_armel.deb
    sha:57e5deaa74563021d6acdc42326fd31c20b854a5
  • apt-utils_1.8.2.3+tuxcare.els1_armel.deb
    sha:7d9908bab87828284b0594d8341253a78e42930c
  • libapt-inst2.0_1.8.2.3+tuxcare.els1_armel.deb
    sha:8b24815792c577500764f2307ff03d3bfb6cc461
  • libapt-pkg-dev_1.8.2.3+tuxcare.els1_armel.deb
    sha:4596f7c77a3eee330b398b4d23adbe7b23a16967
  • libapt-pkg5.0_1.8.2.3+tuxcare.els1_armel.deb
    sha:c215b414b5c839ffdba795b4d5cd9ec8ae92609a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.