[CLSA-2026:1793782926] Fix CVE(s): CVE-2024-0397, CVE-2025-15366, CVE-2025-15367, CVE-2025-8194
Type:
security
Severity:
Important
Release date:
2026-11-04 09:02:18 UTC
Description:
* SECURITY UPDATE: infinite loop in tarfile on archives with negative member offsets - debian/patches/CVE-2025-8194.patch: reject negative byte counts in TarInfo._block() in Lib/tarfile.py, add regression tests - CVE-2025-8194 * SECURITY UPDATE: race condition in ssl.SSLContext.cert_store_stats() and get_ca_certs() walking the X509_STORE without its lock - debian/patches/CVE-2024-0397.patch: take a locked deep copy of the store objects via an X509_STORE_get1_objects() shim in Modules/_ssl.c - CVE-2024-0397 * SECURITY UPDATE: IMAP command injection through CR/LF in command arguments - debian/patches/CVE-2025-15366.patch: reject NUL, CR and LF in IMAP4._command() arguments in Lib/imaplib.py (other control characters stay allowed and are sent quoted), add regression test - CVE-2025-15366 * SECURITY UPDATE: POP3 command injection through control characters in commands - debian/patches/CVE-2025-15367.patch: reject control characters in POP3._putcmd() in Lib/poplib.py, add regression test - CVE-2025-15367
CVEs fixed:
Updated packages:
  • idle-python2.7_2.7.18-8+deb11u1+tuxcare.els7_all.deb
    sha:5406ecdafeede6ce81d759772bbb3b6cb14aa7e7
  • libpython2.7_2.7.18-8+deb11u1+tuxcare.els7_amd64.deb
    sha:ff0c2351617e5186ba97697c926e5d08983e14f3
  • libpython2.7-dev_2.7.18-8+deb11u1+tuxcare.els7_amd64.deb
    sha:de2932e170a9cca715859805bad397d3e61d5944
  • libpython2.7-minimal_2.7.18-8+deb11u1+tuxcare.els7_amd64.deb
    sha:8f6eafb507ec16a445d8d72e2a4d4ccb24ab4c3c
  • libpython2.7-stdlib_2.7.18-8+deb11u1+tuxcare.els7_amd64.deb
    sha:c184e69680b7b48ededb2494a96ee7738490e56e
  • libpython2.7-testsuite_2.7.18-8+deb11u1+tuxcare.els7_all.deb
    sha:e8e1f01eafc161534d54e2ec3c3bde0b95f45fb5
  • python2.7_2.7.18-8+deb11u1+tuxcare.els7_amd64.deb
    sha:da75b4c4d4228a8246885ae335b108c4a1c654fc
  • python2.7-dev_2.7.18-8+deb11u1+tuxcare.els7_amd64.deb
    sha:fe70a9022f87a3578848fb74782228471c2af3ba
  • python2.7-doc_2.7.18-8+deb11u1+tuxcare.els7_all.deb
    sha:5d5e0116792b0776eae6340d0d23c46c8c8d2e9c
  • python2.7-examples_2.7.18-8+deb11u1+tuxcare.els7_all.deb
    sha:70bad89794c8a5c966f606e88ca81907c12550f9
  • python2.7-minimal_2.7.18-8+deb11u1+tuxcare.els7_amd64.deb
    sha:5698773b8a69b9cce84c4a550f7576cb2fac70ed
  • libpython2.7_2.7.18-8+deb11u1+tuxcare.els7_arm64.deb
    sha:7faa3dc499ea4e137ab1cb85a7fb54ac90a69c11
  • libpython2.7-dev_2.7.18-8+deb11u1+tuxcare.els7_arm64.deb
    sha:08b192bb662578a4da20f2dbf18b2091bcdd3c17
  • libpython2.7-minimal_2.7.18-8+deb11u1+tuxcare.els7_arm64.deb
    sha:3b616f4f8a805b66946452db58e9a80898663546
  • libpython2.7-stdlib_2.7.18-8+deb11u1+tuxcare.els7_arm64.deb
    sha:26e185304c3be0b7d20d520f03d9aa76d7157523
  • python2.7_2.7.18-8+deb11u1+tuxcare.els7_arm64.deb
    sha:bc6f67afbff13c46ad55c06a58754a7dbc6f8ef2
  • python2.7-dev_2.7.18-8+deb11u1+tuxcare.els7_arm64.deb
    sha:e6ed18ea27afde497485396d142521a4eda936e8
  • python2.7-minimal_2.7.18-8+deb11u1+tuxcare.els7_arm64.deb
    sha:b0beda35ea32d8bf89540f1ef02bd9c309ed400f
  • libpython2.7_2.7.18-8+deb11u1+tuxcare.els7_armel.deb
    sha:48327d7f51dbec51d40cbe096adb93f544b5b681
  • libpython2.7-dev_2.7.18-8+deb11u1+tuxcare.els7_armel.deb
    sha:7cd4641271e803ed499d4c4f730a4595c1011387
  • libpython2.7-minimal_2.7.18-8+deb11u1+tuxcare.els7_armel.deb
    sha:e8c185a020a29b5a8d4cf4738799ac84e04e8a05
  • libpython2.7-stdlib_2.7.18-8+deb11u1+tuxcare.els7_armel.deb
    sha:fffc778b8e47b6f2c8f04d964a470ad744231f6c
  • python2.7_2.7.18-8+deb11u1+tuxcare.els7_armel.deb
    sha:697f4c317220493b8e0a73dd913e59b3a0dd1652
  • python2.7-dev_2.7.18-8+deb11u1+tuxcare.els7_armel.deb
    sha:9374e2274917238ea37da96e5d5e3dc2bbc2a62d
  • python2.7-minimal_2.7.18-8+deb11u1+tuxcare.els7_armel.deb
    sha:48664e29275ddd5acf71b9ecb66df6ec7a3d1db8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.