[CLSA-2026:1794494581] Fix CVE(s): CVE-2026-109518
Type:
security
Severity:
Important
Release date:
2026-11-12 14:43:12 UTC
Description:
* SECURITY UPDATE: Hard link reuse allows unverified package installation - debian/patches/CVE-2026-109518.patch: open target files exclusively in the acquire methods - CVE-2026-109518
CVEs fixed:
Updated packages:
  • apt_2.2.4+tuxcare.els1_amd64.deb
    sha:1ed962f181f12fd576b25c621849d23eb86dc5c3
  • apt-doc_2.2.4+tuxcare.els1_all.deb
    sha:d9ec28a18b52158b3848f73c3fcb7b89f927e68e
  • apt-transport-https_2.2.4+tuxcare.els1_all.deb
    sha:4d9088608b6b6571fcde44eb3719184715eac15e
  • apt-utils_2.2.4+tuxcare.els1_amd64.deb
    sha:d98d11587cda0e7278ca9b8c73d37c0fbb1dd077
  • libapt-pkg-dev_2.2.4+tuxcare.els1_amd64.deb
    sha:2a975287947c5b06d7f903b29abc56a192010a80
  • libapt-pkg-doc_2.2.4+tuxcare.els1_all.deb
    sha:3d9d4fb64c53d095aba5d04da44b8ad714b82a4c
  • libapt-pkg6.0_2.2.4+tuxcare.els1_amd64.deb
    sha:3f0500fd002bd887a689d4f3605127b465d1563c
  • apt_2.2.4+tuxcare.els1_arm64.deb
    sha:8d5a48c3c91cea5e4295bd2ec0de3365bc538605
  • apt-utils_2.2.4+tuxcare.els1_arm64.deb
    sha:affca698f488fa4022f38b27838f2c26fa0eff31
  • libapt-pkg-dev_2.2.4+tuxcare.els1_arm64.deb
    sha:379c2f9bfdff37ddcc4af9dc932ab2ca76552f58
  • libapt-pkg6.0_2.2.4+tuxcare.els1_arm64.deb
    sha:b26e11c5c014ca80cae320387df43cd32750a0af
  • apt_2.2.4+tuxcare.els1_armel.deb
    sha:fd7d8cfc1c5f3c5fcd4db74a4b84832d8774708d
  • apt-utils_2.2.4+tuxcare.els1_armel.deb
    sha:b5228ed4f0c8386c1baebd847eab2be195872c0c
  • libapt-pkg-dev_2.2.4+tuxcare.els1_armel.deb
    sha:1bb0764da4d4de5ed3d0d4e311df67c87377b50c
  • libapt-pkg6.0_2.2.4+tuxcare.els1_armel.deb
    sha:e14bf7262f3435fbaa3a3d82d9cad847b9bf9cb0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.