Release date:
2026-11-10 10:16:46 UTC
Description:
* SECURITY UPDATE: reject embedded null characters in the host and port
arguments of socket.getaddrinfo()
- debian/patches/CVE-2026-116566.patch: track the byte length of the host
and port arguments in Modules/socketmodule.c and raise ValueError when
a NUL byte truncates them
- CVE-2026-116566
Updated packages:
-
alt-python27_2.7.18-36_amd64.deb
sha:780706b798fafdbdcb98eb89a62d6ee24bc2a82e
-
alt-python27-debug_2.7.18-36_amd64.deb
sha:61797ccc76cf3f31c913872debecb15fff4274a5
-
alt-python27-devel_2.7.18-36_amd64.deb
sha:2d8884251caf7505f2470d101a96d851da70b765
-
alt-python27-idle_2.7.18-36_amd64.deb
sha:f2c2af764013208c85ce5a248ff5004a2b1b74c3
-
alt-python27-libs_2.7.18-36_amd64.deb
sha:b4a1f77fb8b73c9f4a790148df0c0b7d34e51ab8
-
alt-python27-test_2.7.18-36_amd64.deb
sha:73939be5c3a5f579e50ff5e5c170dc182baa9781
-
alt-python27-tkinter_2.7.18-36_amd64.deb
sha:2336fc53e1c5ced306f0eeea5dd4c3e142ce03c4
-
alt-python27-tools_2.7.18-36_amd64.deb
sha:b006cf8effc252199d9ccea35d74b980b20bbb8b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
