Release date:
2026-11-10 10:08:58 UTC
Description:
- CVE-2026-114583: in the tarfile extraction filters, reject a link member
that names the destination directory itself, which would replace the
destination with a (sym)link and redirect all later members
- CVE-2026-116566: reject embedded null characters in the host and port
arguments of socket.getaddrinfo() instead of silently truncating them
Updated packages:
-
alt-python37-3.7.17-35.el10.x86_64.rpm
sha:701527e9c42269378dd7775a88ce2dd902df0cbe05b99d21a737887f1e0a67c3
-
alt-python37-debug-3.7.17-35.el10.x86_64.rpm
sha:0f1e1a7879af6247b14b8b1dcc785f202040f0da8a06be8097b67d0238f8a209
-
alt-python37-devel-3.7.17-35.el10.x86_64.rpm
sha:0cd85da1ac8ae2d8435805a3cd89be360e80827582db521bbf1545b2f48ce642
-
alt-python37-libs-3.7.17-35.el10.x86_64.rpm
sha:f3dde05b0c6b5886c0cd9ddbd456a0d2ea60f4cc6c8682a8cc6c78257c9fbe7f
-
alt-python37-test-3.7.17-35.el10.x86_64.rpm
sha:fda4a0e29610994d25dbbf686b98b46bc8c3ed2d579ced229157c8448a351703
-
alt-python37-tkinter-3.7.17-35.el10.x86_64.rpm
sha:63a7ae8a084c9adafac9d35bbee37adce56aa28dc5f4013f29a658ae764a135e
-
alt-python37-tools-3.7.17-35.el10.x86_64.rpm
sha:39ed804fc6aa3bd657326578f3e59cd1667d793ec1f56c76a7b03a203e9760c1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
