[CLSA-2026:1794008581] Fix CVE(s): CVE-2026-70452
Type:
security
Severity:
Important
Release date:
2026-11-06 23:43:12 UTC
Description:
* SECURITY UPDATE: hosts deny bypass when a hostname token cannot be resolved - debian/patches/CVE-2026-70452.patch: treat an unresolvable "hosts deny" hostname token as a match (fail closed) in match_hostname() - CVE-2026-70452
CVEs fixed:
Updated packages:
  • rsync_3.2.3-4+deb11u4+tuxcare.els6_amd64.deb
    sha:72269d757492af1c97df374385fff6bbf5f7d772
  • rsync_3.2.3-4+deb11u4+tuxcare.els6_arm64.deb
    sha:3af937dca2b1e4a2ab61246099bdc95682407f8d
  • rsync_3.2.3-4+deb11u4+tuxcare.els6_armel.deb
    sha:bf364acdc748ae37ba7772e194348c35234c8c5d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.