Release date:
2026-11-10 10:12:19 UTC
Description:
- CVE-2026-114583: in the tarfile extraction filters, reject a link member
that names the destination directory itself, which would replace the
destination with a (sym)link and redirect all later members
- CVE-2026-116566: reject embedded null characters in the host and port
arguments of socket.getaddrinfo() instead of silently truncating them
Updated packages:
-
alt-python38-3.8.20-34.el10.x86_64.rpm
sha:14528dced2e83ef2c81db26bbadb7c5341e22ce5d6751be73fb941dae98252cc
-
alt-python38-devel-3.8.20-34.el10.x86_64.rpm
sha:b2f833ed90e66dd4068abd3175637bcc6c8eb6d456db55c92d51e206371c953a
-
alt-python38-idle-3.8.20-34.el10.x86_64.rpm
sha:599592f17c4cc8826b9a65d1ad56ea5e70e6727ad5187a0764e9e7e4978bbdf5
-
alt-python38-libs-3.8.20-34.el10.x86_64.rpm
sha:db927cc72ff34f33956fface23c5d2ecb655b84b1b2899fba8f7fb64ee7d77db
-
alt-python38-test-3.8.20-34.el10.x86_64.rpm
sha:ff0c835fcc0d92d770a9a6bd5cf27965bb4d9e7f6e269f040ef6be9ab64443b8
-
alt-python38-tkinter-3.8.20-34.el10.x86_64.rpm
sha:bc970ace6cb26910f31309acaa9a38d46b915586306402211cbda079d045644c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
