Release date:
2026-11-10 10:49:31 UTC
Description:
- CVE-2026-114583: in the tarfile extraction filters, reject a link member
that names the destination directory itself, which would replace the
destination with a (sym)link and redirect all later members
- CVE-2026-116566: reject embedded null characters in the host and port
arguments of socket.getaddrinfo() instead of silently truncating them
Updated packages:
-
alt-python310-3.10.22-4.el10.x86_64.rpm
sha:679921c985caa5be09de104ee01f66fbb6719bb897f0296b4c5c1ad9b4fa77ff
-
alt-python310-debug-3.10.22-4.el10.x86_64.rpm
sha:543a49f4c57325cc6adcdcd14d42f70d56d4777ce08d7e146256b996c241a2a0
-
alt-python310-devel-3.10.22-4.el10.x86_64.rpm
sha:c80e4328ff134fbbf841d70c6bb07fab4228c02524e8808a163345f06929d127
-
alt-python310-idle-3.10.22-4.el10.x86_64.rpm
sha:4ea606dad6175508cf7f77e99924e413bcd08a1089159ddf26952d088af7887e
-
alt-python310-libs-3.10.22-4.el10.x86_64.rpm
sha:46e3eb69d9a5bf6982c5b3941779a176ef900f6b11ea156af35f8f731f3d39f5
-
alt-python310-test-3.10.22-4.el10.x86_64.rpm
sha:7162689ec07d2a2a51841c11b2b4a346970aaf829de160175b9ff6b550c978ca
-
alt-python310-tkinter-3.10.22-4.el10.x86_64.rpm
sha:4dd4533ebf9fffea8ee217f936ebba1900235331904ef4a612b293e524f5fe81
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
