[CLSA-2026:1794319332] Fix CVE(s): CVE-2026-119741
Type:
security
Severity:
Important
Release date:
2026-11-10 14:02:23 UTC
Description:
* SECURITY UPDATE: unbounded hash_search() collision work - debian/patches/els/0041-CVE-2026-119741.patch: unlink duplicate chain entries and skip a block after repeated colliding offsets in match.c, so a crafted checksum set cannot drive excessive sender CPU use in the delta matcher - CVE-2026-119741
CVEs fixed:
Updated packages:
  • rsync_3.1.3-6+tuxcare.els7_amd64.deb
    sha:8ddf21dc5bd76b9f3f722ddbed7095c018d2f6d4
  • rsync_3.1.3-6+tuxcare.els7_arm64.deb
    sha:81059428a653c3dcc137b949f8b6f07de20a3f06
  • rsync_3.1.3-6+tuxcare.els7_armel.deb
    sha:28879ccd2a3421744bde74223ceb0981798c8e3f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.