Release date:
2026-11-10 11:23:42 UTC
Description:
- CVE-2026-114583: in the tarfile extraction filters, reject a link member
that names the destination directory itself, which would replace the
destination with a (sym)link and redirect all later members
- CVE-2026-116566: reject embedded null characters in the host and port
arguments of socket.getaddrinfo() instead of silently truncating them
Updated packages:
-
alt-python39-3.9.23-34.el7.x86_64.rpm
sha:c0072e28039cded924aed869305aac31e9a4ab152e2f02452159ec3a3424b5c4
-
alt-python39-debug-3.9.23-34.el7.x86_64.rpm
sha:8d28647d5621cd1dfea385719a01eb9ead65d8dca5122833db10f6d9ed620ac5
-
alt-python39-devel-3.9.23-34.el7.x86_64.rpm
sha:9e1f25b63b9e928ce70eed69895d3d8407bed5f7d285805e4415a40eed5fe6e9
-
alt-python39-idle-3.9.23-34.el7.x86_64.rpm
sha:e1e83ac06ab540affd89aa59b3f4d3c7989770d9ae1051e4a0215c998549be41
-
alt-python39-libs-3.9.23-34.el7.x86_64.rpm
sha:a6741fd866335f3be83f7372fe19e71d5f08292e1ebba07e5824a7678422d486
-
alt-python39-test-3.9.23-34.el7.x86_64.rpm
sha:909ea6fbcb624efe4d56f749257764dc8c8a4e616f45c2d09db11e8080b155b7
-
alt-python39-tkinter-3.9.23-34.el7.x86_64.rpm
sha:cce4fc3fb6f551aed148e178bdf5737c3095e2ad9616490525a4b92ec1978373
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
