Release date:
2026-11-10 10:05:36 UTC
Description:
- CVE-2026-114583: in the tarfile extraction filters, reject a link member
that names the destination directory itself, which would replace the
destination with a (sym)link and redirect all later members
- CVE-2026-116566: reject embedded null characters in the host and port
arguments of socket.getaddrinfo() instead of silently truncating them
Updated packages:
-
alt-python36-3.6.15-43.el10.x86_64.rpm
sha:d690a3e57bc0eaef7c9ac70c35b8193426fe1360d8c870aa6f051059367509d5
-
alt-python36-debug-3.6.15-43.el10.x86_64.rpm
sha:0989054501ad3cd6fdc1affecb3fff95d76829ecf639dcbb886ee496170d80d8
-
alt-python36-devel-3.6.15-43.el10.x86_64.rpm
sha:c792b77e36f652f711661f3ea8844e7b9757142102ccb7b43b9b0fd81c150f72
-
alt-python36-libs-3.6.15-43.el10.x86_64.rpm
sha:8f50292e757fa6cc3b2d90337a24f92f40001a4ee21f0b1ad96a239e5eb17ec1
-
alt-python36-test-3.6.15-43.el10.x86_64.rpm
sha:b95803a354ae83cdaff21782cfe377f630e33bc8c4ee97d535e0bdd57119ad25
-
alt-python36-tkinter-3.6.15-43.el10.x86_64.rpm
sha:c9895324f79a0e786150d82670ddcb8fd6b80a6c6da839ae50986334ab211067
-
alt-python36-tools-3.6.15-43.el10.x86_64.rpm
sha:9d889b32e566b1e4f09b8c59d1272d3c848d6b47481cb97f4b8747a8df9cede7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
