Release date:
2026-11-10 10:15:44 UTC
Description:
* SECURITY UPDATE: reject embedded null characters in the host and port
arguments of socket.getaddrinfo()
- debian/patches/CVE-2026-116566.patch: track the byte length of the host
and port arguments in Modules/socketmodule.c and raise ValueError when
a NUL byte truncates them
- CVE-2026-116566
Updated packages:
-
alt-python27_2.7.18-36_amd64.deb
sha:08584cfcd16ea57abbee76d1df171a61f488cd6e
-
alt-python27-debug_2.7.18-36_amd64.deb
sha:eee879a50cb9b794715bfea66120c4f0e7dde937
-
alt-python27-devel_2.7.18-36_amd64.deb
sha:de4a4228334c06204839f43f4ca16dfa164848f1
-
alt-python27-idle_2.7.18-36_amd64.deb
sha:f2c2af764013208c85ce5a248ff5004a2b1b74c3
-
alt-python27-libs_2.7.18-36_amd64.deb
sha:38fa8611855fcb8492b2f0f717031a4ea6e46c61
-
alt-python27-test_2.7.18-36_amd64.deb
sha:c46025e60b7a4534082b4519b0845dd6c98a031b
-
alt-python27-tkinter_2.7.18-36_amd64.deb
sha:3b36bc1ba3e7259c950f528869aacc5f1ef4becc
-
alt-python27-tools_2.7.18-36_amd64.deb
sha:b006cf8effc252199d9ccea35d74b980b20bbb8b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
