{"id":"CLSA-2026-1789662743","summary":"Fix of 6 CVEs","details":"   * SECURITY UPDATE: shell metacharacter injection via daemon config hooks and RSYNC_CONNECT_PROG\n     - debian/patches/CVE-2026-53790.patch: backport the upstream fix\n     - CVE-2026-53790\n   * SECURITY UPDATE: daemon inner-chroot module path escape in the /./ handling\n     - debian/patches/CVE-2026-53793.patch: backport the upstream fix\n     - CVE-2026-53793\n   * SECURITY UPDATE: unbounded hash chain walk in hash_search()\n     - debian/patches/CVE-2026-70453.patch: backport the upstream fix\n     - CVE-2026-70453\n   * SECURITY UPDATE: out-of-bounds F_SUM read in hard_link_check()\n     - debian/patches/CVE-2026-70458.patch: backport the upstream fix\n     - CVE-2026-70458\n   * SECURITY UPDATE: I/O timeout bypass via MSG_IO_TIMEOUT\n     - debian/patches/CVE-2026-70462.patch: backport the upstream fix\n     - CVE-2026-70462\n   * SECURITY UPDATE: unbounded pre-transfer handshake in start_daemon()\n     - debian/patches/CVE-2026-70464.patch: backport the upstream fix\n     - CVE-2026-70464","modified":"2026-10-26T09:32:02.125532613Z","published":"2026-09-17T16:32:38Z","upstream":["CVE-2026-53790","CVE-2026-53793","CVE-2026-70453","CVE-2026-70458","CVE-2026-70462","CVE-2026-70464"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1789662743.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53790"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53793"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70453"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70458"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70462"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70464"}],"affected":[{"package":{"name":"rsync","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/rsync?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-3ubuntu1.3+tuxcare.els17"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1789662743.json"}}],"schema_version":"1.9.0"}