Release date:
2026-11-10 10:05:20 UTC
Description:
- CVE-2026-114583: in the tarfile extraction filters, reject a link member
that names the destination directory itself, which would replace the
destination with a (sym)link and redirect all later members
- CVE-2026-116566: reject embedded null characters in the host and port
arguments of socket.getaddrinfo() instead of silently truncating them
Updated packages:
-
alt-python36-3.6.15-43.el9.x86_64.rpm
sha:d7a55689b1d0266ff3a56ab44d5034a992bfdc2815322510a561a4e67e0ba123
-
alt-python36-debug-3.6.15-43.el9.x86_64.rpm
sha:8249fdabd4502c745d55419565ef8f5fe65e0f7c8e16e39b9c0a3e21d44cfab9
-
alt-python36-devel-3.6.15-43.el9.x86_64.rpm
sha:e537d8b0874528e1547da412682e3b5630cf267e59a97b026c50812acf120f08
-
alt-python36-libs-3.6.15-43.el9.x86_64.rpm
sha:f363b43a97350641e13103bf8fc788a2cc40fa98caea8b71c3bc95f1f2d3c1e1
-
alt-python36-test-3.6.15-43.el9.x86_64.rpm
sha:6d281c2dfe8f9ff8874ec818a2958a53827f876351527422f37dec92e506f215
-
alt-python36-tkinter-3.6.15-43.el9.x86_64.rpm
sha:b06f51fe7c14a0486ee783519951e4080f0ae0660a11088ce05fd2b2956cd29d
-
alt-python36-tools-3.6.15-43.el9.x86_64.rpm
sha:ad5f3968f72ae9e4c3d78664561e6d0d8b6f23e221382f59d8fb6b68513d5849
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
