Release date:
2026-11-10 10:48:05 UTC
Description:
- CVE-2026-114583: in the tarfile extraction filters, reject a link member
that names the destination directory itself, which would replace the
destination with a (sym)link and redirect all later members
- CVE-2026-116566: reject embedded null characters in the host and port
arguments of socket.getaddrinfo() instead of silently truncating them
Updated packages:
-
alt-python310-3.10.22-4.el7.x86_64.rpm
sha:1b052db2a3b12e2be9722688874f9c49179a9578a2b89fab381cac5e17c4b3d2
-
alt-python310-debug-3.10.22-4.el7.x86_64.rpm
sha:fade915e763b33d3abea7c3b9bc37fa0a2d427ed038a04628e61afef03d00ccd
-
alt-python310-devel-3.10.22-4.el7.x86_64.rpm
sha:0a4c498888743cd07d3d853523638c174fdb4a79f9a0fbe2232c14f6f68b3b39
-
alt-python310-idle-3.10.22-4.el7.x86_64.rpm
sha:1f4299dd868faa1ccfc3c144e3a34bd13a112cce5f5eae032d3d50961076f534
-
alt-python310-libs-3.10.22-4.el7.x86_64.rpm
sha:3e77e4ba954a8f59167ef6cd0ecf20e010bfdebc4356fe76581cc23e89f175ca
-
alt-python310-test-3.10.22-4.el7.x86_64.rpm
sha:5d98faa1a5dc06827b8aa33e8b80e02ee83808d367ef0470e85e674f414606df
-
alt-python310-tkinter-3.10.22-4.el7.x86_64.rpm
sha:78d19ba44d2f1d8a682261cd323753ae58e2d3e777e5f30152bb6b7609938e51
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
