Release date:
2026-11-10 11:23:45 UTC
Description:
- CVE-2026-114583: in the tarfile extraction filters, reject a link member
that names the destination directory itself, which would replace the
destination with a (sym)link and redirect all later members
- CVE-2026-116566: reject embedded null characters in the host and port
arguments of socket.getaddrinfo() instead of silently truncating them
Updated packages:
-
alt-python39-3.9.23-34.el10.x86_64.rpm
sha:694ae034243f6a9c9f087763c71c0ecfe4a37df529c5f1fed7c6a2d4cdc29354
-
alt-python39-debug-3.9.23-34.el10.x86_64.rpm
sha:60278db20bb06411beef0b4821d78fc665a0a4b98f3e3eb916d2ca4f0e831c04
-
alt-python39-devel-3.9.23-34.el10.x86_64.rpm
sha:e4efbe3d2fff846231e168c8a1f949f12d507db39d5ebcc35e258e29ad0ee656
-
alt-python39-idle-3.9.23-34.el10.x86_64.rpm
sha:22fdc7051004539f5cb048a82cc10e0ab054f156e8e726c3ac917f5c1b573de0
-
alt-python39-libs-3.9.23-34.el10.x86_64.rpm
sha:1343e98167533b4853c07e9d1a9762cb7d7aecb543c0d0fddcd8070f89d864bc
-
alt-python39-test-3.9.23-34.el10.x86_64.rpm
sha:9c4e03f60b1cc5f207fde3613caf2607d86c80171a247b5d6ca0fe826e329d47
-
alt-python39-tkinter-3.9.23-34.el10.x86_64.rpm
sha:240712f274afa049bf481b586a8fb428842d2da1d35cde4fd851a3bf8707703f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
