Release date:
2026-11-10 10:08:44 UTC
Description:
- CVE-2026-114583: in the tarfile extraction filters, reject a link member
that names the destination directory itself, which would replace the
destination with a (sym)link and redirect all later members
- CVE-2026-116566: reject embedded null characters in the host and port
arguments of socket.getaddrinfo() instead of silently truncating them
Updated packages:
-
alt-python37-3.7.17-35.el9.x86_64.rpm
sha:cc061c48b42dd61aa44fa23bce6042df9ca3f036773a0c1bf72e84abd96163a4
-
alt-python37-debug-3.7.17-35.el9.x86_64.rpm
sha:e352b1e095331aec97fd20441d57082865b36976ccd896f03d910ff1c62a77d7
-
alt-python37-devel-3.7.17-35.el9.x86_64.rpm
sha:4a1230953d350d372362a6bbd70dac7f48b0d7625d9cff3c53397000d43ff6c1
-
alt-python37-libs-3.7.17-35.el9.x86_64.rpm
sha:28dc6694d2c851da9c10317def18b03656d6dc58aadb85e8dcd01357eaea4cf5
-
alt-python37-test-3.7.17-35.el9.x86_64.rpm
sha:105e7bc7a2c96bcfec0e9adb53016130d37491e5d39d887c6f59d7ba1b5fb81c
-
alt-python37-tkinter-3.7.17-35.el9.x86_64.rpm
sha:3bcd61da85092b7692a24c36a7e7e1e813e53e824d8feba607eccfee83c93851
-
alt-python37-tools-3.7.17-35.el9.x86_64.rpm
sha:62a69bdbb7ea07cae3b78849b9bcc163984c18d633f87209f1a3ef63861f8065
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
