Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130118)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130118 advisory. rsync 3.1.0 before 3.5.0contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user...

EUVD-2026-58041

rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the...

CVE-2026-70463

CVE-2026-70463 affects rsync up to version 3.4.x (before 3.5.0) where the auth users parser incorrectly tokenizes the user list by comma, failing to correctly handle entries like @Group Name with spaces. This causes the deny rule for that group to be silently discarded during parsing, enabling an...