{"id":"CLSA-2026-1789735848","summary":"Fix of 6 CVEs","details":"   * SECURITY UPDATE: unbounded hash-chain walk in the delta-transfer matcher\n     - debian/patches/CVE-2026-70453.patch: bound the hash_search() chain walk\n       in match.c so a crafted checksum set cannot drive quadratic CPU use\n     - CVE-2026-70453\n   * SECURITY UPDATE: peer-supplied I/O timeout accepted as non-positive\n     - debian/patches/CVE-2026-70462.patch: reject a non-positive\n       MSG_IO_TIMEOUT from the peer in io.c\n     - CVE-2026-70462\n   * SECURITY UPDATE: unbounded daemon pre-transfer handshake\n     - debian/patches/CVE-2026-70464.patch: bound the pre-transfer handshake\n       with a timeout in clientserver.c and io.c\n     - CVE-2026-70464\n   * SECURITY UPDATE: malicious-peer protocol input and checksum-slot lifetime\n     - debian/patches/CVE-2026-70458-1.patch: daemon robustness against\n       malicious-peer protocol input\n     - debian/patches/CVE-2026-70458-2.patch: guard the F_SUM checksum-slot\n       lifetime in hlink.c and main.c\n     - debian/patches/CVE-2026-70458-3-copy-devices.patch: extend the same\n       guard to the copy-devices path\n     - CVE-2026-70458\n   * SECURITY UPDATE: daemon authentication, access and argument hardening\n     - debian/patches/CVE-2026-53790-1.patch: harden daemon authentication,\n       access, socket and argument handling\n     - debian/patches/CVE-2026-53790-2-shell-chars.patch: confine operator- and\n       peer-supplied paths to the served tree and reject shell metacharacters\n     - debian/patches/CVE-2026-53790-3-uninit.patch: fix a safe_arg()\n       uninitialized-byte leak in options.c\n     - CVE-2026-53790\n   * SECURITY UPDATE: inner-module escape for a daemon module using /./\n     - debian/patches/CVE-2026-53793-1-basis-paths.patch: stat alternate-basis\n       candidates through the confined resolver in generator.c\n     - debian/patches/CVE-2026-53793-2-inner-module.patch: widen the\n       use_secure_symlinks and change_dir() gates from \"am_daemon &&\n       !am_chrooted\" to \"am_daemon && (!am_chrooted || module_dirlen)\" so an\n       inner module root is the trust boundary, not the kernel chroot\n     - CVE-2026-53793","modified":"2026-10-26T09:43:52.540591913Z","published":"2026-09-18T12:51:03Z","upstream":["CVE-2026-53790","CVE-2026-53793","CVE-2026-70453","CVE-2026-70458","CVE-2026-70462","CVE-2026-70464"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1789735848.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53790"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53793"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70453"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70458"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70462"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70464"}],"affected":[{"package":{"name":"rsync","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/rsync?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-8ubuntu0.9+tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789735848.json"}}],"schema_version":"1.9.0"}