[CLSA-2026:1793091356] Fix CVE(s): CVE-2026-82251, CVE-2026-82252, CVE-2026-82253
Type:
security
Severity:
Moderate
Release date:
2026-10-27 08:56:16 UTC
Description:
* SECURITY UPDATE: submodule name path traversal in vendored gix crate - debian/patches/CVE-2026-82251-CVE-2026-82253.patch: validate names in gix - CVE-2026-82251 * SECURITY UPDATE: .gitmodules symlink followed in vendored gix crate - debian/patches/CVE-2026-82252.patch: ignore a symlinked .gitmodules - CVE-2026-82252 * SECURITY UPDATE: submodule name check bypass in vendored gix-validate crate - debian/patches/CVE-2026-82251-CVE-2026-82253.patch: reject any .. part - CVE-2026-82253
CVEs fixed:
Updated packages:
  • cargo1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:2217713f7e7bf41a8f5e8a89504cb8154b1cd4ff
  • cargo1.87-doc_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:da1d063131ac42ab255be485e32f793d10add68a
  • libstd-rust1.87-1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:0b6e2178442a41cc55538b506b55f9b1003a586e
  • libstd-rust1.87-dev_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:fadf8c4740f2fd6ea8371b90197a6d7861a4a5b6
  • rust1.87-all_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:2cfa45101b5d5bd23f7fcbfe9ff40162e051b291
  • rust1.87-analyzer_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:7b900646bddd802396d5f4389c712366d4ccb43b
  • rust1.87-clippy_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:7b8650eb236328bd7951ba42366ac7c89d085e0a
  • rust1.87-doc_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:4e74d8d559d44155a602452d53182a7f62f64384
  • rust1.87-gdb_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:b3b570ff9e97f1084c09ae4fa0b2fcfdcf9b3d94
  • rust1.87-lldb_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:60f4c3a105ca65adf99aea3dc6527807d844db74
  • rust1.87-llvm_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:ba13d5c7bc1d6d40e9f9ccf79ccef33823c2a702
  • rust1.87-src_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_all.deb
    sha:32e26910d1901b18cb11ed11bf2bdd695a749241
  • rustc1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:02a6dc476b16a12576f0bde42bbba271812a05cd
  • rustfmt1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_amd64.deb
    sha:bb5fa350f811d059194698641683adc94ae554f8
  • cargo1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:d11afeb39a76023c8780da7952cda553dc84fdbf
  • libstd-rust1.87-1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:fc8efc7add5436c6703241d51beabeb78639fe89
  • libstd-rust1.87-dev_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:1ca77d8eb3aa938e1729b59b8fe19fd40a510e8d
  • rust1.87-analyzer_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:bcebc28598f7c1c02b7b1813abb375747e231328
  • rust1.87-clippy_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:f40e119960b3dfeee12d014c9a19e49024cfcb05
  • rust1.87-llvm_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:a559c12d02c181305e37430ac26918b58f34f8fd
  • rustc1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:56f7cfe8cc47fefb6cfe36c2e1445fe90cc46513
  • rustfmt1.87_1.87.0+dfsg1-1~bpo13+2+tuxcare.els9_arm64.deb
    sha:bd74f68434936c830c65a1257561c328f5a078b0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.