[CLSA-2026:1793091549] Fix CVE(s): CVE-2026-82251, CVE-2026-82252, CVE-2026-82253
Type:
security
Severity:
Moderate
Release date:
2026-10-27 08:59:24 UTC
Description:
* SECURITY UPDATE: submodule name path traversal in vendored gix crate - debian/patches/CVE-2026-82251-CVE-2026-82253.patch: validate names in gix - CVE-2026-82251 * SECURITY UPDATE: .gitmodules symlink followed in vendored gix crate - debian/patches/CVE-2026-82252.patch: ignore a symlinked .gitmodules - CVE-2026-82252 * SECURITY UPDATE: submodule name check bypass in vendored gix-validate crate - debian/patches/CVE-2026-82251-CVE-2026-82253.patch: reject any .. part - CVE-2026-82253
CVEs fixed:
Updated packages:
  • cargo1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:61316cf38bff994a3b1527457469cb2aac7d00be
  • cargo1.87-doc_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:54ffa4f5fa39a47640dc1a5b952e8dc551d9428f
  • libstd-rust1.87-1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:5534c522a30ae7f4e57d54672f6ddce56ca3a5bc
  • libstd-rust1.87-dev_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:33be4f6b4b36699da523bc6fdde1e56a6985dbaf
  • rust1.87-all_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:aab543dbd8c3124256c52e34fc9b2538ee5bdd9f
  • rust1.87-analyzer_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:5020aa2dd2916efa5508d6cd26a47911d85ae39e
  • rust1.87-clippy_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:9969e480ceba1451624caf15a7225e2db4530dab
  • rust1.87-doc_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:381295d4421bbd437d73e8c33b80edd29c79879a
  • rust1.87-gdb_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:87d81696e73094c867ce4effdc1d829e63e551ad
  • rust1.87-lldb_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:a66f45e90980aca5da95d4d4cdfa2e6db37d5b31
  • rust1.87-llvm_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:75389618e1bf85fee23a3ef45ec3c31e93ba1c02
  • rust1.87-src_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:149deaa8da01e5185a6750f49d8d1b71d10508c1
  • rustc1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:71a348ac9a95f20c7e7159d14294a3289e1e1a1c
  • rustfmt1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:5451dad30d2bdab6b325ac4b7b309837e2322b15
  • cargo1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:837f767774af085b7b5fd31a8b4d15e3ca863c9f
  • libstd-rust1.87-1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:6bcb3cf7a8877a6c35216186807112e04dc3452e
  • libstd-rust1.87-dev_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:96a196de8537ab90e4965022a81d199300076d23
  • rust1.87-analyzer_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:d1c357e4eed1452c19b195b30b8d2756cdac3442
  • rust1.87-clippy_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:c7766755e7639b876db947920105e1a201c9c144
  • rust1.87-llvm_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:ea692e26d9616161d2ef75d673ab8885c2e26795
  • rustc1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:1fa503d88648564c0371f9a29997abf2616039e2
  • rustfmt1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:7d303fc8754074b9ffab3f79d2b04d9d2b87c26c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.