Release date:
2026-11-10 10:06:17 UTC
Description:
- CVE-2026-114583: in the tarfile extraction filters, reject a link member
that names the destination directory itself, which would replace the
destination with a (sym)link and redirect all later members
- CVE-2026-116566: reject embedded null characters in the host and port
arguments of socket.getaddrinfo() instead of silently truncating them
Updated packages:
-
alt-python36-3.6.15-43.el8.x86_64.rpm
sha:6d006cbc0fbc28315944c37f38205a1dc95f32732789b3430f4eb2c35d71cb6b
-
alt-python36-debug-3.6.15-43.el8.x86_64.rpm
sha:893063ce633af1c91a7e666aad607afed9aa1b0e32da0c3b7e3d987b687cbeea
-
alt-python36-devel-3.6.15-43.el8.x86_64.rpm
sha:7443c2411eec496d9da8b9c9fdb9bde6b0fac220156ab89e230983bf1e78ac31
-
alt-python36-libs-3.6.15-43.el8.x86_64.rpm
sha:bacef31ff53665e1764dcbfd700e8e0b194a17a6af25aef409ede0917eef800c
-
alt-python36-test-3.6.15-43.el8.x86_64.rpm
sha:21184b0987ffa12bcefeec36e994846d1ecd4274e5e5ed907c3b410c25e5e880
-
alt-python36-tkinter-3.6.15-43.el8.x86_64.rpm
sha:ee3c43cec457c7e3a3efa6d6396abd4bac0b1b4e709ee2a80922e52ecc964036
-
alt-python36-tools-3.6.15-43.el8.x86_64.rpm
sha:d585db1164823f98ddd41315af43f947b686885ecbe66733a280618a7625160a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
