Release date:
2026-11-10 10:09:47 UTC
Description:
- CVE-2026-114583: in the tarfile extraction filters, reject a link member
that names the destination directory itself, which would replace the
destination with a (sym)link and redirect all later members
- CVE-2026-116566: reject embedded null characters in the host and port
arguments of socket.getaddrinfo() instead of silently truncating them
Updated packages:
-
alt-python37-3.7.17-35.el8.x86_64.rpm
sha:29cce4acf5e26aa4692215461c9d027046c02d799bb3dc70533890f022f5b04e
-
alt-python37-debug-3.7.17-35.el8.x86_64.rpm
sha:21057ad76519fb942854555e47ffeb0db97e33fd58590a53be6aa3de98ca9f11
-
alt-python37-devel-3.7.17-35.el8.x86_64.rpm
sha:e2cfceab0a75158feb4147708db10d8c10849cce5f92e80b1939fb36db30f289
-
alt-python37-libs-3.7.17-35.el8.x86_64.rpm
sha:1600adb603e0c652a9292af666f89a480e94dbac90f128478293629d9f14c493
-
alt-python37-test-3.7.17-35.el8.x86_64.rpm
sha:b25d459fa2b325851980df4bf8a73a67a354c57007811029bdd061c5a36fdf37
-
alt-python37-tkinter-3.7.17-35.el8.x86_64.rpm
sha:64eefc65ae06191b1f3abec1f066f0aa758761798d0dc390e63ef31c8da395be
-
alt-python37-tools-3.7.17-35.el8.x86_64.rpm
sha:88940af2e5ef05436086610ecb1f4e29174b211f16c222b25aeac40f60f6131a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
