ALAS2-2026-3945: CVEs fixed (Amazon Linux)

ALAS2-2026-3945 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-70453 HIGH 7.5 rsync before 3.5.0 contains an algorithmic complexity vulnerability in the hash_search() function that allows
• CVE-2026-70458 HIGH 8.2 rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory

Applies to

• Amazon Linux 2

← Back to latest CVEs