[CLSA-2026:1794326299] python3: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-10 15:58:32 UTC
Description:
- CVE-2024-12718: tarfile: extractall() applies directory metadata outside the destination - CVE-2025-4138: tarfile: data filter does not normalize link targets; also validate the normalized target that is written (gh-149486) - CVE-2025-4330: tarfile: directories not re-filtered before metadata fixup
CVEs fixed:
Updated packages:
  • python3-3.7.16-1.amzn2.0.30.tuxcare.els4.aarch64.rpm
    sha:58edb66bf028531b75d54750a66a397e4f78e575b626621a8a1c635e1527deb9
  • python3-3.7.16-1.amzn2.0.30.tuxcare.els4.i686.rpm
    sha:35393966bdc48234de8e00f6276223c2e3585d31047df6dc5d13a2b6a117d1aa
  • python3-3.7.16-1.amzn2.0.30.tuxcare.els4.x86_64.rpm
    sha:2bd897d5125c7f1d98c4b2bd37714e5d187d8b203890fbc12bf9776c5a14ca34
  • python3-debug-3.7.16-1.amzn2.0.30.tuxcare.els4.aarch64.rpm
    sha:2fe9a9c3937de99ac0a2426baee877505b042a7b8b2a4a13d05f11ce4d8226e2
  • python3-debug-3.7.16-1.amzn2.0.30.tuxcare.els4.i686.rpm
    sha:ad0efb9ab0b5a3de51d2c04cd344c1f5d55592401fd638cfef10caaee550a33b
  • python3-debug-3.7.16-1.amzn2.0.30.tuxcare.els4.x86_64.rpm
    sha:50e52ec48bb68124b1bb34ffac4de7a12c05e74904d2754ca2608dc6aab2a77b
  • python3-devel-3.7.16-1.amzn2.0.30.tuxcare.els4.aarch64.rpm
    sha:cac3ce694432bf1b4a2df00861dab547893a5a684bb530e8b736367c0fa389d5
  • python3-devel-3.7.16-1.amzn2.0.30.tuxcare.els4.i686.rpm
    sha:8d5baa3ef963f8e221f943d2e3486365fa9d5b72fb1a3002d5cfc117b14f6f97
  • python3-devel-3.7.16-1.amzn2.0.30.tuxcare.els4.x86_64.rpm
    sha:40fc7b1f6c4049da1e2759addc8825d20fc1eed2b7a80955e528798c2f12ad64
  • python3-libs-3.7.16-1.amzn2.0.30.tuxcare.els4.aarch64.rpm
    sha:61fc519d18f8c906ef42972b050aa98cf32f88eaee08a308d2256cc78fd25cfc
  • python3-libs-3.7.16-1.amzn2.0.30.tuxcare.els4.i686.rpm
    sha:39934d710b3b7037c885271e19155826b4a7668cd5e705d9515d99bb20f0672e
  • python3-libs-3.7.16-1.amzn2.0.30.tuxcare.els4.x86_64.rpm
    sha:295ab6e4c3aef73ff300b9bc04dc2d855e14b60f03e3519cdd4d6eabfeb496da
  • python3-test-3.7.16-1.amzn2.0.30.tuxcare.els4.aarch64.rpm
    sha:cb9d0dd5efe7d235ca6c0e9f5bf50865973ed85d745245cd777ea4b96d3ee7d0
  • python3-test-3.7.16-1.amzn2.0.30.tuxcare.els4.i686.rpm
    sha:72e57595f2b8087719d79a8defa29922d1ce4bfbd51af084f6fec02353c8c2ad
  • python3-test-3.7.16-1.amzn2.0.30.tuxcare.els4.x86_64.rpm
    sha:506b869b40a87142d4126b5d5ba8f75b7f258a5fd5bac63604ec491a7be05e3c
  • python3-tkinter-3.7.16-1.amzn2.0.30.tuxcare.els4.aarch64.rpm
    sha:132002af590053100b4168e3c3e233076a1a142cc9a8e9835689945fb841f203
  • python3-tkinter-3.7.16-1.amzn2.0.30.tuxcare.els4.i686.rpm
    sha:155f738af5a9b0e63a01e3dbe247f6a8dd04b006cda927749f9634b566b052de
  • python3-tkinter-3.7.16-1.amzn2.0.30.tuxcare.els4.x86_64.rpm
    sha:18d438aed8c04dc3291e0b2b421ba0f329ff1751edc74b274e6a69c19ced0432
  • python3-tools-3.7.16-1.amzn2.0.30.tuxcare.els4.aarch64.rpm
    sha:25b35c962857eabfb0aec239699e0e75960444f48910ae2f3f8c54f2d9e4f62f
  • python3-tools-3.7.16-1.amzn2.0.30.tuxcare.els4.i686.rpm
    sha:ff323c84e7920d1b66841467d9a228114b319cd99a8ba4f1c222729872d2b9f2
  • python3-tools-3.7.16-1.amzn2.0.30.tuxcare.els4.x86_64.rpm
    sha:ea57572f8cf7377aad2f8b6ada05892f21ffa2211763b5a84b9d7e7dec35105b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.