ELSA-2026-67463-0

Описание

[3.5.0-3]

• Related: RHEL-246094 - O_PATH for directory travesal full fix

[3.5.0-2]

• Related: RHEL-246094 - O_PATH for directory traversal

[3.5.0-1]

• Resolves: RHEL-246094 - Rebase rsync to version 3.5.0 in RHEL10
• Resolves: RHEL-245337 - Directory escape via TOCTOU (CVE-2026-53783)
• Resolves: RHEL-244599 - Arbitrary file write (CVE-2026-53785)
• Resolves: RHEL-246095 - Command injection (CVE-2026-53790)
• Resolves: RHEL-246065 - Daemon IP spoofing (CVE-2026-53791)
• Resolves: RHEL-244718 - Local privilege escalation (CVE-2026-53803)
• Resolves: RHEL-244797 - DoS via algorithmic complexity (CVE-2026-70453)
• Resolves: RHEL-245247 - DoS via Zstandard compression (CVE-2026-70455)
• Resolves: RHEL-245188 - Heap out-of-bounds write (CVE-2026-70456)
• Resolves: RHEL-245313 - Information disclosure and DoS (CVE-2026-70461)