Release date:
2026-11-10 10:08:33 UTC
Description:
- CVE-2026-114583: in the tarfile extraction filters, reject a link member
that names the destination directory itself, which would replace the
destination with a (sym)link and redirect all later members
- CVE-2026-116566: reject embedded null characters in the host and port
arguments of socket.getaddrinfo() instead of silently truncating them
Updated packages:
-
alt-python37-3.7.17-35.el7.x86_64.rpm
sha:6b0ea59602709087f7396558da467ba693b9f020965869161bbf1fc622dd61ef
-
alt-python37-debug-3.7.17-35.el7.x86_64.rpm
sha:091413ee647f9a87ab00d60cb6617d0becdfa8d7599bccd931f8204308dd102b
-
alt-python37-devel-3.7.17-35.el7.x86_64.rpm
sha:e65c8618e3ce42063fab81cdb2150c16d9e91e010c29731f24ddc246ce820b0c
-
alt-python37-libs-3.7.17-35.el7.x86_64.rpm
sha:ac1e1850b5331cc9f5b2b3eed4ef70682eb84ca8aad2989e3156d91d28bfda99
-
alt-python37-test-3.7.17-35.el7.x86_64.rpm
sha:2772be2355793a3b3b715ebeffe865a997d2c36ac1912d46722919ec559c1cdd
-
alt-python37-tkinter-3.7.17-35.el7.x86_64.rpm
sha:7390b944a80814c8c7e18a5a984648b0602aff585ee953479309bedc0b6ec0d2
-
alt-python37-tools-3.7.17-35.el7.x86_64.rpm
sha:a0e82c111c7dbfe8847f18eb2aa5ceb63e85f1e2ac806621d7a66350566d3baf
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
