Release date:
2026-11-10 10:12:07 UTC
Description:
- CVE-2026-114583: in the tarfile extraction filters, reject a link member
that names the destination directory itself, which would replace the
destination with a (sym)link and redirect all later members
- CVE-2026-116566: reject embedded null characters in the host and port
arguments of socket.getaddrinfo() instead of silently truncating them
Updated packages:
-
alt-python38-3.8.20-34.el7.x86_64.rpm
sha:acf1e7b144166d7b8741c4191e525c773de3d4d74196ec3a2eefbab890082fc3
-
alt-python38-debug-3.8.20-34.el7.x86_64.rpm
sha:0c5c8dea30b08667a6631be60b74d880e7cdcf8c19a12e061a9910902fb22d29
-
alt-python38-devel-3.8.20-34.el7.x86_64.rpm
sha:8440e71d759b1acf868291904a0178dff8bb561fb0cd6ad31c1b7708aa519b4d
-
alt-python38-idle-3.8.20-34.el7.x86_64.rpm
sha:193a946fa3ff309e65ce9a5519148c14f29d0b7887ff1d7268f6424e6e15785e
-
alt-python38-libs-3.8.20-34.el7.x86_64.rpm
sha:8b3913800e3dc846fbd71c3c821dfb218ba5a8968455d5e703acc448329d5fec
-
alt-python38-test-3.8.20-34.el7.x86_64.rpm
sha:3683d916aeb037beeb0a0f3b1b8545a3a842ea119fe790f7263ce9e53cd22057
-
alt-python38-tkinter-3.8.20-34.el7.x86_64.rpm
sha:a6d25d45b2cc028315d6ebf0f84d100aba05359382a029bfddc8e66652705a2c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
