Release date:
2026-11-10 10:05:21 UTC
Description:
- CVE-2026-114583: in the tarfile extraction filters, reject a link member
that names the destination directory itself, which would replace the
destination with a (sym)link and redirect all later members
- CVE-2026-116566: reject embedded null characters in the host and port
arguments of socket.getaddrinfo() instead of silently truncating them
Updated packages:
-
alt-python36-3.6.15-43.el7.x86_64.rpm
sha:ff144b11086c27b8940768873b491e8d3266fef8e9fdca5bf9d261c53b742b6c
-
alt-python36-debug-3.6.15-43.el7.x86_64.rpm
sha:56aa77adf2ad7f8080b8cf2e76c925f4be14c7b96bcc3b447ac2b2d9056b4b65
-
alt-python36-devel-3.6.15-43.el7.x86_64.rpm
sha:1c9208b17f41788660d5f1d74c246631e3e0a322f2a5dc138f6eb1fcbf302bef
-
alt-python36-libs-3.6.15-43.el7.x86_64.rpm
sha:2471de875de23f888f18693df8823e89d5970c985b354f37bf275f985e9e900d
-
alt-python36-test-3.6.15-43.el7.x86_64.rpm
sha:8b80992e05ae1a4cdcca2a87fa66c00a85018585f51fe3b94aefa52606b7f87a
-
alt-python36-tkinter-3.6.15-43.el7.x86_64.rpm
sha:a182aef686ed72eaa0643413a49fe30b19988e05a4ce41d6dc67b5a1bfff9b28
-
alt-python36-tools-3.6.15-43.el7.x86_64.rpm
sha:7ed8d3bf830222ce1b55b0bbac380fc566b57d346908701e7de827936bdadfbf
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
