Release date:
2026-11-10 10:13:32 UTC
Description:
- CVE-2026-114583: in the tarfile extraction filters, reject a link member
that names the destination directory itself, which would replace the
destination with a (sym)link and redirect all later members
- CVE-2026-116566: reject embedded null characters in the host and port
arguments of socket.getaddrinfo() instead of silently truncating them
Updated packages:
-
alt-python38-3.8.20-34.el8.x86_64.rpm
sha:bc9695c7fef115f5fc6c5478d45dce066db4615c3419110984f2d0627ab0d6ee
-
alt-python38-debug-3.8.20-34.el8.x86_64.rpm
sha:9dd927cb004e6d326586977c5a728b3d5802cd9f169feaf1a9268301285e9d96
-
alt-python38-devel-3.8.20-34.el8.x86_64.rpm
sha:2b06f29052110d14b38d619c26e67cabc7a691ae348c0594ae0fd85aa3091b8f
-
alt-python38-idle-3.8.20-34.el8.x86_64.rpm
sha:9f7023e577a237539371192682f191eb80d4eda490b1c125eb006c09f8d73ed5
-
alt-python38-libs-3.8.20-34.el8.x86_64.rpm
sha:b784fb2b9f53552fab76d231eb791c6f36da8c3f0815497a01c08b8674d86e8e
-
alt-python38-test-3.8.20-34.el8.x86_64.rpm
sha:a71b3820192bad7a4131080d2356ead775a86a423844024898cc30e9eebd2c8d
-
alt-python38-tkinter-3.8.20-34.el8.x86_64.rpm
sha:c26b2aa0126a08668e4bc5f4632840b21431d2d5d66a2bc277032e04a97537eb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
