Release date:
2026-11-10 11:23:51 UTC
Description:
- CVE-2026-114583: in the tarfile extraction filters, reject a link member
that names the destination directory itself, which would replace the
destination with a (sym)link and redirect all later members
- CVE-2026-116566: reject embedded null characters in the host and port
arguments of socket.getaddrinfo() instead of silently truncating them
Updated packages:
-
alt-python39-3.9.23-34.el9.x86_64.rpm
sha:a69ba1771de6018c477824543361097c18404a3f6faa151b6372ecddb6898d63
-
alt-python39-debug-3.9.23-34.el9.x86_64.rpm
sha:2b8a693af70729c9acee1512da2d78c3b8658cef507c99178a93e1f9dac6b31e
-
alt-python39-devel-3.9.23-34.el9.x86_64.rpm
sha:44544faf5c367fb29a519aad0495ea731f335fad888949c545519ff8048ed88c
-
alt-python39-idle-3.9.23-34.el9.x86_64.rpm
sha:d00bae0f7138f7deb9dc5301e7b37d085ebac6eaa203953d85e94c5706085fe5
-
alt-python39-libs-3.9.23-34.el9.x86_64.rpm
sha:dd40096f492375ae5074165aea55ed61403eacab458870899f2712031b68e2ac
-
alt-python39-test-3.9.23-34.el9.x86_64.rpm
sha:6a1113b9e3b3fd673f64045e7f9d7353413535291ae5dd40b6752ba184af2831
-
alt-python39-tkinter-3.9.23-34.el9.x86_64.rpm
sha:7a05b9ece10ad7804d2c20b34f08ac287711f8cdb842f987ae185ab11cbd6f80
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
