[CLSA-2026:1794442038] rsync: Fix of CVE-2026-70452
Type:
security
Severity:
Important
Release date:
2026-11-12 00:07:33 UTC
Description:
- CVE-2026-70452: fail closed when a "hosts deny" hostname token cannot be resolved, instead of treating it as a non-match and admitting the host
CVEs fixed:
Updated packages:
  • rsync-3.1.2-12.0.5.el7_9.tuxcare.els7.i686.rpm
    sha:a82cee9ca335685e1c06ca91073dc836caaa32c2c84b8d792d3a884817fa891c
  • rsync-3.1.2-12.0.5.el7_9.tuxcare.els7.x86_64.rpm
    sha:55ba2bd273a92ffdd9161524e63ca7c4fecc07e31c2c15a5c1b85de80a1a8df0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.