Release date:
2026-11-10 12:56:17 UTC
Description:
* SECURITY UPDATE: reject embedded null characters in the host and port
arguments of socket.getaddrinfo()
- debian/patches/CVE-2026-116566.patch: track the byte length of the host
and port arguments in Modules/socketmodule.c and raise ValueError when
a NUL byte truncates them
- CVE-2026-116566
Updated packages:
-
alt-python27_2.7.18-36_amd64.deb
sha:fa5886685fb809fb92319863da6f4c772e509181
-
alt-python27-debug_2.7.18-36_amd64.deb
sha:5d941a3c98d6b47cb0a2796dec4ec2058107ba89
-
alt-python27-devel_2.7.18-36_amd64.deb
sha:f7811979518f54f74497b73170df621ff7c34367
-
alt-python27-idle_2.7.18-36_amd64.deb
sha:0d9e925292f7144ccb1f1dd38380c9a7d4814752
-
alt-python27-libs_2.7.18-36_amd64.deb
sha:46e017c9a67f4610256105b0e8c4ffff89065ba6
-
alt-python27-test_2.7.18-36_amd64.deb
sha:880e3e04064e5577282b5639f1f3adb0369c82cd
-
alt-python27-tkinter_2.7.18-36_amd64.deb
sha:f73f757b61939d9387e87fd2d1d0b684046c7fb9
-
alt-python27-tools_2.7.18-36_amd64.deb
sha:175ec456578375fbc0c8a1e5459a52b28b7a9a78
-
alt-python27_2.7.18-36_arm64.deb
sha:ab07c69ae6bd96546476085d75b63ff63e495ede
-
alt-python27-debug_2.7.18-36_arm64.deb
sha:44013b73e4034e7161b036a6e3fde3c935ab6df6
-
alt-python27-devel_2.7.18-36_arm64.deb
sha:1aa1f19eaac3241866afadd672259c62960846aa
-
alt-python27-idle_2.7.18-36_arm64.deb
sha:2868461ca6c7f0a22b76f7e34a61cc423c1ff2eb
-
alt-python27-libs_2.7.18-36_arm64.deb
sha:6d8782a477ee54c91ce2ececdcdb724797d6297d
-
alt-python27-test_2.7.18-36_arm64.deb
sha:4140376ffc322a0044958d9a786a722b1f23300d
-
alt-python27-tkinter_2.7.18-36_arm64.deb
sha:9b8fbaa09980c5e74f02c4f94b936d04c9875510
-
alt-python27-tools_2.7.18-36_arm64.deb
sha:cf08662a19e5574e6c9549a927d2ab418a34baec
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
