[CLSA-2026:1793609487] Fix CVE(s): CVE-2026-82251, CVE-2026-82252, CVE-2026-82253
Type:
security
Severity:
Moderate
Release date:
2026-11-02 08:51:43 UTC
Description:
* SECURITY UPDATE: submodule name path traversal in vendored gix crate - debian/patches/CVE-2026-82251-CVE-2026-82253.patch: validate names in gix - CVE-2026-82251 * SECURITY UPDATE: .gitmodules symlink followed in vendored gix crate - debian/patches/CVE-2026-82252.patch: ignore a symlinked .gitmodules - CVE-2026-82252 * SECURITY UPDATE: submodule name check bypass in vendored gix-validate crate - debian/patches/CVE-2026-82251-CVE-2026-82253.patch: reject any .. part - CVE-2026-82253
CVEs fixed:
Updated packages:
  • cargo1.86_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:3939038f8fb276ae7f50fe500e919a4c805c698b
  • cargo1.86-doc_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:ef1664805936a3b8975e53b204adab7324b03e60
  • libstd-rust1.86-1.86_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:35f3fe437348103f596bbf299f0833581265122d
  • libstd-rust1.86-dev_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:9d9134ec1511663d6b31f71baba6fcdd54e6638f
  • rust1.86-all_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:95988d3737311bf2282587dcc26d1568dda49854
  • rust1.86-analyzer_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:0869b4245b67f9adfa9baaa2ac019aafc5d628c9
  • rust1.86-clippy_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:d7e5a29d5ab7804ffac58ba77ca58d2aa4d0621d
  • rust1.86-doc_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:24a4a977828b5314cf7575ca56b17c117220230c
  • rust1.86-gdb_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:452330a0982c7e79f45b7bdab5a95d9dc79d2d3b
  • rust1.86-lldb_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:ed492a2032a21302c5629e65201791271af823d2
  • rust1.86-llvm_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:6b14a4128bd5fb03732b4a7dcf7cfe5f2bf7189d
  • rust1.86-src_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:6b4053231a1773e12559ca3e6e561d636e38dc63
  • rustc1.86_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:1b4502bb5645d66024614e26956015374d04e684
  • rustfmt1.86_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:2959f15e9acab3a6da70efb98d6d23dcb7e1ba83
  • cargo1.86_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:3e7e62734972c7b2f7697276f8e04a34c41d9b8c
  • libstd-rust1.86-1.86_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:356e9b7640f4de01470d0f05f633d5e437fcd336
  • libstd-rust1.86-dev_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:e6eed458681d96d3ca169c87a1f8d1fa96e1417f
  • rust1.86-analyzer_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:b430d852f44c6b315d4f1b2f828671270b24e7a7
  • rust1.86-clippy_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:3e4bde75b9600ab892d733229143f9f1863a8a1e
  • rust1.86-llvm_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:d1e1ccca8f9975937be9b79a4f9af07abd3c5f67
  • rustc1.86_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:1d0ba822162ed2fdeef2eaecf22c3e712689ff01
  • rustfmt1.86_1.86.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:5ce69614f291a69c346f63d4aa263672e17ac1b3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.