[CLSA-2026:1794167521] rsync: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-08 19:52:12 UTC
Description:
- CVE-2026-70452: fail closed when a "hosts deny" hostname token cannot be resolved, instead of treating it as a non-match and admitting the host
CVEs fixed:
Updated packages:
  • rsync-3.1.2-12.0.5.amzn2.tuxcare.els7.aarch64.rpm
    sha:f31414ea409a0788d011604373ca18afcd328e783728fbe87e3558626cd4ab86
  • rsync-3.1.2-12.0.5.amzn2.tuxcare.els7.i686.rpm
    sha:d1d12b081d469d70c7570fca407a330281f5c249f58f1e59727d15e916fb38ef
  • rsync-3.1.2-12.0.5.amzn2.tuxcare.els7.x86_64.rpm
    sha:be36c401a355ac0b4016a910217a0f9ddcb8ee48bf10ea3998791182c7f1df54
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.