{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "TuxCare License Agreement",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://tuxcare.com/contact/",
      "name": "TuxCare",
      "namespace": "https://tuxcare.com/"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.tuxcare.com/csaf/v2/els_os/centos-stream8els/vex/2026/cve-2026-53796-els_os-centos-stream8els.json"
      }
    ],
    "tracking": {
      "current_release_date": "2026-09-15T13:11:26Z",
      "generator": {
        "date": "2026-09-15T13:11:26Z",
        "engine": {
          "name": "pyCSAF"
        }
      },
      "id": "CVE-2026-53796-ELS_OS-CENTOS-STREAM8ELS",
      "initial_release_date": "2026-08-13T15:19:00Z",
      "revision_history": [
        {
          "date": "2026-08-13T15:19:00Z",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-15T08:33:57Z",
          "number": "2",
          "summary": "Official Publication"
        },
        {
          "date": "2026-09-15T13:11:26Z",
          "number": "3",
          "summary": "Update document"
        }
      ],
      "status": "final",
      "version": "3"
    },
    "title": "Security update on CVE-2026-53796"
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Community Enterprise Operating System 8",
                "product": {
                  "name": "Community Enterprise Operating System 8",
                  "product_id": "CentOS-Stream-8",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:centos:centos:8:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Community Enterprise Operating System"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rsync-0:3.1.3-19.el8.1.x86_64",
                "product": {
                  "name": "rsync-0:3.1.3-19.el8.1.x86_64",
                  "product_id": "rsync-0:3.1.3-19.el8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/centos/rsync@3.1.3-19.el8.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rsync-daemon-0:3.1.3-19.el8.1.noarch",
                "product": {
                  "name": "rsync-daemon-0:3.1.3-19.el8.1.noarch",
                  "product_id": "rsync-daemon-0:3.1.3-19.el8.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/centos/rsync-daemon@3.1.3-19.el8.1?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat, Inc."
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els2.x86_64",
                "product": {
                  "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els2.x86_64",
                  "product_id": "rsync-0:3.1.3-19.el8.1.tuxcare.els2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync@3.1.3-19.el8.1.tuxcare.els2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els5.x86_64",
                "product": {
                  "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els5.x86_64",
                  "product_id": "rsync-0:3.1.3-19.el8.1.tuxcare.els5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync@3.1.3-19.el8.1.tuxcare.els5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els8.x86_64",
                "product": {
                  "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els8.x86_64",
                  "product_id": "rsync-0:3.1.3-19.el8.1.tuxcare.els8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync@3.1.3-19.el8.1.tuxcare.els8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els1.x86_64",
                "product": {
                  "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els1.x86_64",
                  "product_id": "rsync-0:3.1.3-19.el8.1.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync@3.1.3-19.el8.1.tuxcare.els1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els6.x86_64",
                "product": {
                  "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els6.x86_64",
                  "product_id": "rsync-0:3.1.3-19.el8.1.tuxcare.els6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync@3.1.3-19.el8.1.tuxcare.els6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els4.x86_64",
                "product": {
                  "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els4.x86_64",
                  "product_id": "rsync-0:3.1.3-19.el8.1.tuxcare.els4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync@3.1.3-19.el8.1.tuxcare.els4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els9.x86_64",
                "product": {
                  "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els9.x86_64",
                  "product_id": "rsync-0:3.1.3-19.el8.1.tuxcare.els9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync@3.1.3-19.el8.1.tuxcare.els9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els10.x86_64",
                "product": {
                  "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els10.x86_64",
                  "product_id": "rsync-0:3.1.3-19.el8.1.tuxcare.els10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync@3.1.3-19.el8.1.tuxcare.els10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els7.x86_64",
                "product": {
                  "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els7.x86_64",
                  "product_id": "rsync-0:3.1.3-19.el8.1.tuxcare.els7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync@3.1.3-19.el8.1.tuxcare.els7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els7.noarch",
                "product": {
                  "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els7.noarch",
                  "product_id": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync-daemon@3.1.3-19.el8.1.tuxcare.els7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els10.noarch",
                "product": {
                  "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els10.noarch",
                  "product_id": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els10.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync-daemon@3.1.3-19.el8.1.tuxcare.els10?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els5.noarch",
                "product": {
                  "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els5.noarch",
                  "product_id": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync-daemon@3.1.3-19.el8.1.tuxcare.els5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els6.noarch",
                "product": {
                  "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els6.noarch",
                  "product_id": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els6.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync-daemon@3.1.3-19.el8.1.tuxcare.els6?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els8.noarch",
                "product": {
                  "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els8.noarch",
                  "product_id": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync-daemon@3.1.3-19.el8.1.tuxcare.els8?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els1.noarch",
                "product": {
                  "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els1.noarch",
                  "product_id": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync-daemon@3.1.3-19.el8.1.tuxcare.els1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els9.noarch",
                "product": {
                  "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els9.noarch",
                  "product_id": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els9.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync-daemon@3.1.3-19.el8.1.tuxcare.els9?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els4.noarch",
                "product": {
                  "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els4.noarch",
                  "product_id": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync-daemon@3.1.3-19.el8.1.tuxcare.els4?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els2.noarch",
                "product": {
                  "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els2.noarch",
                  "product_id": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync-daemon@3.1.3-19.el8.1.tuxcare.els2?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "TuxCare"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els2.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els2.x86_64"
        },
        "product_reference": "rsync-0:3.1.3-19.el8.1.tuxcare.els2.x86_64",
        "relates_to_product_reference": "CentOS-Stream-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els5.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els5.x86_64"
        },
        "product_reference": "rsync-0:3.1.3-19.el8.1.tuxcare.els5.x86_64",
        "relates_to_product_reference": "CentOS-Stream-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els8.x86_64"
        },
        "product_reference": "rsync-0:3.1.3-19.el8.1.tuxcare.els8.x86_64",
        "relates_to_product_reference": "CentOS-Stream-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els1.x86_64"
        },
        "product_reference": "rsync-0:3.1.3-19.el8.1.tuxcare.els1.x86_64",
        "relates_to_product_reference": "CentOS-Stream-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els6.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els6.x86_64"
        },
        "product_reference": "rsync-0:3.1.3-19.el8.1.tuxcare.els6.x86_64",
        "relates_to_product_reference": "CentOS-Stream-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els4.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els4.x86_64"
        },
        "product_reference": "rsync-0:3.1.3-19.el8.1.tuxcare.els4.x86_64",
        "relates_to_product_reference": "CentOS-Stream-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els9.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els9.x86_64"
        },
        "product_reference": "rsync-0:3.1.3-19.el8.1.tuxcare.els9.x86_64",
        "relates_to_product_reference": "CentOS-Stream-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els10.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els10.x86_64"
        },
        "product_reference": "rsync-0:3.1.3-19.el8.1.tuxcare.els10.x86_64",
        "relates_to_product_reference": "CentOS-Stream-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.3-19.el8.1.tuxcare.els7.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els7.x86_64"
        },
        "product_reference": "rsync-0:3.1.3-19.el8.1.tuxcare.els7.x86_64",
        "relates_to_product_reference": "CentOS-Stream-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els7.noarch as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els7.noarch"
        },
        "product_reference": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els7.noarch",
        "relates_to_product_reference": "CentOS-Stream-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els10.noarch as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els10.noarch"
        },
        "product_reference": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els10.noarch",
        "relates_to_product_reference": "CentOS-Stream-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els5.noarch as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els5.noarch"
        },
        "product_reference": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els5.noarch",
        "relates_to_product_reference": "CentOS-Stream-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els6.noarch as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els6.noarch"
        },
        "product_reference": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els6.noarch",
        "relates_to_product_reference": "CentOS-Stream-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els8.noarch as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els8.noarch"
        },
        "product_reference": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els8.noarch",
        "relates_to_product_reference": "CentOS-Stream-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els1.noarch as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els1.noarch"
        },
        "product_reference": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els1.noarch",
        "relates_to_product_reference": "CentOS-Stream-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els9.noarch as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els9.noarch"
        },
        "product_reference": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els9.noarch",
        "relates_to_product_reference": "CentOS-Stream-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els4.noarch as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els4.noarch"
        },
        "product_reference": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els4.noarch",
        "relates_to_product_reference": "CentOS-Stream-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els2.noarch as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els2.noarch"
        },
        "product_reference": "rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els2.noarch",
        "relates_to_product_reference": "CentOS-Stream-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.3-19.el8.1.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.x86_64"
        },
        "product_reference": "rsync-0:3.1.3-19.el8.1.x86_64",
        "relates_to_product_reference": "CentOS-Stream-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-daemon-0:3.1.3-19.el8.1.noarch as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.noarch"
        },
        "product_reference": "rsync-daemon-0:3.1.3-19.el8.1.noarch",
        "relates_to_product_reference": "CentOS-Stream-8"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-53796",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access ('Link Following')"
      },
      "notes": [
        {
          "category": "description",
          "text": "rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the non-daemon receiver's destination directory handling that allows an attacker who can manipulate destination path parent components to redirect file writes to unintended locations. Attackers can substitute a symlink for a component of the destination path between the path resolution and chdir() call, causing the receiver's working directory to be established outside the intended destination tree so that subsequent relative-path file writes land in unintended filesystem locations.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "known_affected": [
          "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els1.x86_64",
          "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els10.x86_64",
          "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els2.x86_64",
          "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els4.x86_64",
          "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els5.x86_64",
          "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els6.x86_64",
          "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els7.x86_64",
          "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els8.x86_64",
          "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els9.x86_64",
          "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.x86_64",
          "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.noarch",
          "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els1.noarch",
          "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els10.noarch",
          "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els2.noarch",
          "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els4.noarch",
          "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els5.noarch",
          "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els6.noarch",
          "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els7.noarch",
          "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els8.noarch",
          "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els9.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-53796"
        },
        {
          "category": "external",
          "summary": "https://github.com/RsyncProject/rsync/releases/tag/v3.5.0",
          "url": "https://github.com/RsyncProject/rsync/releases/tag/v3.5.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-w75h-ccff-w53m",
          "url": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-w75h-ccff-w53m"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/rsync-toctou-race-condition-via-destination-directory-handling",
          "url": "https://www.vulncheck.com/advisories/rsync-toctou-race-condition-via-destination-directory-handling"
        }
      ],
      "release_date": "2026-08-13T15:19:00Z",
      "remediations": [
        {
          "category": "no_fix_planned",
          "date": "2026-09-15T10:02:55.601937Z",
          "details": "This issue is local-only and high-complexity: exploitation requires a low-privileged user on the host to modify parent directories of the non-daemon rsync receiver’s destination and win a narrow TOCTOU race by swapping in a symlink mid-operation. In centrally managed servers/VMs, rsync destinations and their parent path components are ordinarily owned by service or root accounts and are not writable by unprivileged users, so the necessary preconditions to trigger the race are absent. With no confidentiality impact and integrity/availability affected only if those uncommon local conditions are met, this CVE can be safely deprioritized relative to remotely exploitable risks.",
          "product_ids": [
            "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els1.x86_64",
            "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els10.x86_64",
            "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els2.x86_64",
            "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els4.x86_64",
            "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els5.x86_64",
            "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els6.x86_64",
            "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els7.x86_64",
            "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els8.x86_64",
            "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.tuxcare.els9.x86_64",
            "CentOS-Stream-8:rsync-0:3.1.3-19.el8.1.x86_64",
            "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.noarch",
            "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els1.noarch",
            "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els10.noarch",
            "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els2.noarch",
            "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els4.noarch",
            "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els5.noarch",
            "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els6.noarch",
            "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els7.noarch",
            "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els8.noarch",
            "CentOS-Stream-8:rsync-daemon-0:3.1.3-19.el8.1.tuxcare.els9.noarch"
          ]
        }
      ]
    }
  ]
}