{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "TuxCare License Agreement",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://tuxcare.com/contact/",
      "name": "TuxCare",
      "namespace": "https://tuxcare.com/"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.tuxcare.com/csaf/v2/els_os/rhel7els/vex/2026/cve-2026-53796-els_os-rhel7els.json"
      }
    ],
    "tracking": {
      "current_release_date": "2026-09-18T13:39:52Z",
      "generator": {
        "date": "2026-09-18T13:39:52Z",
        "engine": {
          "name": "pyCSAF"
        }
      },
      "id": "CVE-2026-53796-ELS_OS-RHEL7ELS",
      "initial_release_date": "2026-08-13T15:19:00Z",
      "revision_history": [
        {
          "date": "2026-08-13T15:19:00Z",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-15T08:43:12Z",
          "number": "2",
          "summary": "Official Publication"
        },
        {
          "date": "2026-09-15T13:16:59Z",
          "number": "3",
          "summary": "Update document"
        },
        {
          "date": "2026-09-16T17:37:19Z",
          "number": "4",
          "summary": "Update document"
        },
        {
          "date": "2026-09-18T13:39:52Z",
          "number": "5",
          "summary": "Update document"
        }
      ],
      "status": "final",
      "version": "5"
    },
    "title": "Security update on CVE-2026-53796"
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rsync-0:3.1.2-12.0.1.el7_9.x86_64",
                "product": {
                  "name": "rsync-0:3.1.2-12.0.1.el7_9.x86_64",
                  "product_id": "rsync-0:3.1.2-12.0.1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rsync@3.1.2-12.0.1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-0:3.1.2-12.el7_9.x86_64",
                "product": {
                  "name": "rsync-0:3.1.2-12.el7_9.x86_64",
                  "product_id": "rsync-0:3.1.2-12.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rsync@3.1.2-12.el7_9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 7",
                "product": {
                  "name": "Red Hat Enterprise Linux 7",
                  "product_id": "Red-Hat-7",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:redhat:enterprise_linux:7:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          }
        ],
        "category": "vendor",
        "name": "Red Hat, Inc."
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els7.x86_64",
                "product": {
                  "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els7.x86_64",
                  "product_id": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync@3.1.2-12.0.1.el7_9.tuxcare.els7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els2.x86_64",
                "product": {
                  "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els2.x86_64",
                  "product_id": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync@3.1.2-12.0.1.el7_9.tuxcare.els2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els8.x86_64",
                "product": {
                  "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els8.x86_64",
                  "product_id": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync@3.1.2-12.0.1.el7_9.tuxcare.els8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els3.x86_64",
                "product": {
                  "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els3.x86_64",
                  "product_id": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync@3.1.2-12.0.1.el7_9.tuxcare.els3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-0:3.1.2-12.el7_9.tuxcare.els4.x86_64",
                "product": {
                  "name": "rsync-0:3.1.2-12.el7_9.tuxcare.els4.x86_64",
                  "product_id": "rsync-0:3.1.2-12.el7_9.tuxcare.els4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync@3.1.2-12.el7_9.tuxcare.els4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els10.x86_64",
                "product": {
                  "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els10.x86_64",
                  "product_id": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync@3.1.2-12.0.1.el7_9.tuxcare.els10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els6.x86_64",
                "product": {
                  "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els6.x86_64",
                  "product_id": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync@3.1.2-12.0.1.el7_9.tuxcare.els6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els13.x86_64",
                "product": {
                  "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els13.x86_64",
                  "product_id": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els13.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync@3.1.2-12.0.1.el7_9.tuxcare.els13?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els15.x86_64",
                "product": {
                  "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els15.x86_64",
                  "product_id": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els15.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/rsync@3.1.2-12.0.1.el7_9.tuxcare.els15?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "TuxCare"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els7.x86_64 as a component of Red Hat Enterprise Linux 7",
          "product_id": "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els7.x86_64"
        },
        "product_reference": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els7.x86_64",
        "relates_to_product_reference": "Red-Hat-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els2.x86_64 as a component of Red Hat Enterprise Linux 7",
          "product_id": "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els2.x86_64"
        },
        "product_reference": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els2.x86_64",
        "relates_to_product_reference": "Red-Hat-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els8.x86_64 as a component of Red Hat Enterprise Linux 7",
          "product_id": "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els8.x86_64"
        },
        "product_reference": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els8.x86_64",
        "relates_to_product_reference": "Red-Hat-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els3.x86_64 as a component of Red Hat Enterprise Linux 7",
          "product_id": "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els3.x86_64"
        },
        "product_reference": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els3.x86_64",
        "relates_to_product_reference": "Red-Hat-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.2-12.el7_9.tuxcare.els4.x86_64 as a component of Red Hat Enterprise Linux 7",
          "product_id": "Red-Hat-7:rsync-0:3.1.2-12.el7_9.tuxcare.els4.x86_64"
        },
        "product_reference": "rsync-0:3.1.2-12.el7_9.tuxcare.els4.x86_64",
        "relates_to_product_reference": "Red-Hat-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els10.x86_64 as a component of Red Hat Enterprise Linux 7",
          "product_id": "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els10.x86_64"
        },
        "product_reference": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els10.x86_64",
        "relates_to_product_reference": "Red-Hat-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els6.x86_64 as a component of Red Hat Enterprise Linux 7",
          "product_id": "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els6.x86_64"
        },
        "product_reference": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els6.x86_64",
        "relates_to_product_reference": "Red-Hat-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.2-12.0.1.el7_9.x86_64 as a component of Red Hat Enterprise Linux 7",
          "product_id": "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.x86_64"
        },
        "product_reference": "rsync-0:3.1.2-12.0.1.el7_9.x86_64",
        "relates_to_product_reference": "Red-Hat-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.2-12.el7_9.x86_64 as a component of Red Hat Enterprise Linux 7",
          "product_id": "Red-Hat-7:rsync-0:3.1.2-12.el7_9.x86_64"
        },
        "product_reference": "rsync-0:3.1.2-12.el7_9.x86_64",
        "relates_to_product_reference": "Red-Hat-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els13.x86_64 as a component of Red Hat Enterprise Linux 7",
          "product_id": "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els13.x86_64"
        },
        "product_reference": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els13.x86_64",
        "relates_to_product_reference": "Red-Hat-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els15.x86_64 as a component of Red Hat Enterprise Linux 7",
          "product_id": "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els15.x86_64"
        },
        "product_reference": "rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els15.x86_64",
        "relates_to_product_reference": "Red-Hat-7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-53796",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access ('Link Following')"
      },
      "notes": [
        {
          "category": "description",
          "text": "rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the non-daemon receiver's destination directory handling that allows an attacker who can manipulate destination path parent components to redirect file writes to unintended locations. Attackers can substitute a symlink for a component of the destination path between the path resolution and chdir() call, causing the receiver's working directory to be established outside the intended destination tree so that subsequent relative-path file writes land in unintended filesystem locations.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "known_affected": [
          "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els10.x86_64",
          "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els13.x86_64",
          "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els15.x86_64",
          "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els2.x86_64",
          "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els3.x86_64",
          "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els6.x86_64",
          "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els7.x86_64",
          "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els8.x86_64",
          "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.x86_64",
          "Red-Hat-7:rsync-0:3.1.2-12.el7_9.tuxcare.els4.x86_64",
          "Red-Hat-7:rsync-0:3.1.2-12.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-53796"
        },
        {
          "category": "external",
          "summary": "https://github.com/RsyncProject/rsync/releases/tag/v3.5.0",
          "url": "https://github.com/RsyncProject/rsync/releases/tag/v3.5.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-w75h-ccff-w53m",
          "url": "https://github.com/RsyncProject/rsync/security/advisories/GHSA-w75h-ccff-w53m"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/rsync-toctou-race-condition-via-destination-directory-handling",
          "url": "https://www.vulncheck.com/advisories/rsync-toctou-race-condition-via-destination-directory-handling"
        }
      ],
      "release_date": "2026-08-13T15:19:00Z",
      "remediations": [
        {
          "category": "no_fix_planned",
          "date": "2026-09-15T10:02:59.867995Z",
          "details": "This issue is local-only and high-complexity: exploitation requires a low-privileged user on the host to modify parent directories of the non-daemon rsync receiver’s destination and win a narrow TOCTOU race by swapping in a symlink mid-operation. In centrally managed servers/VMs, rsync destinations and their parent path components are ordinarily owned by service or root accounts and are not writable by unprivileged users, so the necessary preconditions to trigger the race are absent. With no confidentiality impact and integrity/availability affected only if those uncommon local conditions are met, this CVE can be safely deprioritized relative to remotely exploitable risks.",
          "product_ids": [
            "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els10.x86_64",
            "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els13.x86_64",
            "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els15.x86_64",
            "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els2.x86_64",
            "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els3.x86_64",
            "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els6.x86_64",
            "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els7.x86_64",
            "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.tuxcare.els8.x86_64",
            "Red-Hat-7:rsync-0:3.1.2-12.0.1.el7_9.x86_64",
            "Red-Hat-7:rsync-0:3.1.2-12.el7_9.tuxcare.els4.x86_64",
            "Red-Hat-7:rsync-0:3.1.2-12.el7_9.x86_64"
          ]
        }
      ]
    }
  ]
}