[CLSA-2026:1794311289] Fix CVE(s): CVE-2026-114583, CVE-2026-116566
Type:
security
Severity:
Moderate
Release date:
2026-11-10 11:48:21 UTC
Description:
* SECURITY UPDATE: reject a link member that names the destination directory itself in the tarfile extraction filters - debian/patches/CVE-2026-114583.patch: move the destination-replacement check out of the 'data' filter branch in Lib/tarfile.py so both the 'tar' and 'data' filters raise OutsideDestinationError, and extend Lib/test/test_tarfile.py to cover both filters - CVE-2026-114583 * SECURITY UPDATE: reject embedded null characters in the host and port arguments of socket.getaddrinfo() - debian/patches/CVE-2026-116566.patch: track the byte length of the host and port arguments in Modules/socketmodule.c and raise ValueError when a NUL byte truncates them - CVE-2026-116566
CVEs fixed:
Updated packages:
  • alt-python36_3.6.15-53_amd64.deb
    sha:ceef2f451896b8c7ac753c00f26b7f4a21a291c9
  • alt-python36-debug_3.6.15-53_amd64.deb
    sha:19be60c6e958f4d2b23ba169fb6e21e88487f38a
  • alt-python36-devel_3.6.15-53_amd64.deb
    sha:e1fb21e03de306d14411e96feb2a163f4602d8e9
  • alt-python36-libs_3.6.15-53_amd64.deb
    sha:5932fe4524a1ff6263db1a0b9dbbf9c2bd7779d9
  • alt-python36-test_3.6.15-53_amd64.deb
    sha:ce9159051f9834505dfdbcb125a1c981c0ece1d0
  • alt-python36-tkinter_3.6.15-53_amd64.deb
    sha:0efb59c0462f03eca775de2a47cc6058803aa51f
  • alt-python36-tools_3.6.15-53_amd64.deb
    sha:403f9fabb30a579c55ef0e513ab7568417919d9a
  • alt-python36_3.6.15-53_arm64.deb
    sha:ff32fe5ab643f6a273da62ba3a65b84c9e7f3789
  • alt-python36-debug_3.6.15-53_arm64.deb
    sha:b57eab86bd81837d69bfc16bd6824dc6a91294f8
  • alt-python36-devel_3.6.15-53_arm64.deb
    sha:0b935347925ed6771c55d7ef85c22d3e55d6d4da
  • alt-python36-libs_3.6.15-53_arm64.deb
    sha:2e1db44c69d4dbf62a6bfcc24d8426e830bf7690
  • alt-python36-test_3.6.15-53_arm64.deb
    sha:e7b8e55336e1aba0bfa7281be8dc7d20926e197c
  • alt-python36-tkinter_3.6.15-53_arm64.deb
    sha:f6c1e80fd581741b1003e1dd0dda05fb945e48f5
  • alt-python36-tools_3.6.15-53_arm64.deb
    sha:8f9e459940b9cd2f5d82ce24a3f7afffaa31aa93
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.