Release date:
2026-11-10 10:48:48 UTC
Description:
- CVE-2026-114583: in the tarfile extraction filters, reject a link member
that names the destination directory itself, which would replace the
destination with a (sym)link and redirect all later members
- CVE-2026-116566: reject embedded null characters in the host and port
arguments of socket.getaddrinfo() instead of silently truncating them
Updated packages:
-
alt-python310-3.10.22-4.el9.x86_64.rpm
sha:4c22fa03a90e6e6504f02b345ffbb18b21dccd10ca0181c008e6ec13ceff43f8
-
alt-python310-debug-3.10.22-4.el9.x86_64.rpm
sha:312fc64195f8867aa2f6d1ea99f842ed8441f5b45f205aa883d3ab3943b67f2d
-
alt-python310-devel-3.10.22-4.el9.x86_64.rpm
sha:9fcef3088c007c14f609cc07d8d5061da12a2bc43ebff5444c29004c3ff47513
-
alt-python310-idle-3.10.22-4.el9.x86_64.rpm
sha:0d742cc56bc188bd86f0b633fd54affef804ad2ca8426100aa8896d1f17e4d9a
-
alt-python310-libs-3.10.22-4.el9.x86_64.rpm
sha:86959816c697718a609f7efb838d21312e075a864a57bb7483805ac36f45099f
-
alt-python310-test-3.10.22-4.el9.x86_64.rpm
sha:9c7f568065df223900e059f52bc072dbd5f93871b86f0c4f5098eb660bf843b0
-
alt-python310-tkinter-3.10.22-4.el9.x86_64.rpm
sha:610eb73222c09701674942b1ae4709da684c99fe9a0c1a235233065de5f884a3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
