[CLSA-2026:1794573829] Fix CVE(s): CVE-2026-92205
Type:
security
Severity:
Moderate
Release date:
2026-11-13 12:44:00 UTC
Description:
* SECURITY UPDATE: directory traversal via links extracted through a symlink in tar archives - debian/patches/CVE-2026-92205.patch: tar: refuse to create a delayed link whose directory components are not real directories, and treat a bare ".." member name as unsafe - CVE-2026-92205
CVEs fixed:
Updated packages:
  • busybox_1.30.1-4+tuxcare.els5_amd64.deb
    sha:35716a93cce76c9700f4200c82e738fa4b885851
  • busybox-static_1.30.1-4+tuxcare.els5_amd64.deb
    sha:697ce1d46643870e669917a8ef63da2d2be16f2c
  • busybox-syslogd_1.30.1-4+tuxcare.els5_all.deb
    sha:4661cfcd2f70837db195f7e8137a0920157abd30
  • udhcpc_1.30.1-4+tuxcare.els5_amd64.deb
    sha:7151b9e394781a8780d5778f940e298ceba32b6c
  • udhcpd_1.30.1-4+tuxcare.els5_amd64.deb
    sha:356666db3ea65df654584bd58bdfeacd0bcdd2ea
  • busybox_1.30.1-4+tuxcare.els5_arm64.deb
    sha:7bb9921d64168bf68b3b7eb9c55ddc6291b2f7ed
  • busybox-static_1.30.1-4+tuxcare.els5_arm64.deb
    sha:b7882e3b8fb01d644ba79ac8c6553b5a65c6bda5
  • udhcpc_1.30.1-4+tuxcare.els5_arm64.deb
    sha:ddbdafcfc1a87e55ea93831cc2a1fc088590911e
  • udhcpd_1.30.1-4+tuxcare.els5_arm64.deb
    sha:8dc8f2be1eb0c4747a7a95629ed03e542f508855
  • busybox_1.30.1-4+tuxcare.els5_armel.deb
    sha:16a619364f7266f4312fb0ef5f49fbbcb73bb9d9
  • busybox-static_1.30.1-4+tuxcare.els5_armel.deb
    sha:f78539ce2407e005790aa28f7d1076d1db0b525f
  • udhcpc_1.30.1-4+tuxcare.els5_armel.deb
    sha:2963b9b60d4d6275573565e9577eb784d373adda
  • udhcpd_1.30.1-4+tuxcare.els5_armel.deb
    sha:c3d12c5d6c38c7ab6dc70e2acb0e32d68b7c6054
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.