[CLSA-2026:1794311534] Fix CVE(s): CVE-2026-114583, CVE-2026-116566
Type:
security
Severity:
Moderate
Release date:
2026-11-10 11:52:27 UTC
Description:
* SECURITY UPDATE: reject a link member that names the destination directory itself in the tarfile extraction filters - debian/patches/CVE-2026-114583.patch: move the destination-replacement check out of the 'data' filter branch in Lib/tarfile.py so both the 'tar' and 'data' filters raise OutsideDestinationError, and extend Lib/test/test_tarfile.py to cover both filters - CVE-2026-114583 * SECURITY UPDATE: reject embedded null characters in the host and port arguments of socket.getaddrinfo() - debian/patches/CVE-2026-116566.patch: track the byte length of the host and port arguments in Modules/socketmodule.c and raise ValueError when a NUL byte truncates them - CVE-2026-116566
CVEs fixed:
Updated packages:
  • alt-python37_3.7.17-38_amd64.deb
    sha:52fb3f3411864f58772717ccd7faf660d03702a2
  • alt-python37-debug_3.7.17-38_amd64.deb
    sha:4b4bbba8a19c11ed0da5e0f93f4e6337326a1c36
  • alt-python37-devel_3.7.17-38_amd64.deb
    sha:4add5ed3c868d012fe44c9d460254b704fb318b6
  • alt-python37-libs_3.7.17-38_amd64.deb
    sha:d6a731a2902b4cd144c816dc8dabe159509eae1d
  • alt-python37-test_3.7.17-38_amd64.deb
    sha:77510c49d3039784ea6f03fc0470e4f503f84d96
  • alt-python37-tkinter_3.7.17-38_amd64.deb
    sha:f7a4dfc564ab103fb812f92a62a470ffb4b8bce0
  • alt-python37-tools_3.7.17-38_amd64.deb
    sha:1468f4d52ac6dc6c39c046585c9ded669179d519
  • alt-python37_3.7.17-38_arm64.deb
    sha:cc4581cac1e17949812c191ae6607dded70fe45e
  • alt-python37-debug_3.7.17-38_arm64.deb
    sha:7b1fe853b92e67ff550633fd22b21cc8e61633a4
  • alt-python37-devel_3.7.17-38_arm64.deb
    sha:4ef1346ea846bb538dea320200e2f63d32de6c92
  • alt-python37-libs_3.7.17-38_arm64.deb
    sha:8b52ab10552721229a3bd1e7a96756d7d41a580f
  • alt-python37-test_3.7.17-38_arm64.deb
    sha:b9918cea521f38a308aaa6d59b305d669c59e0d6
  • alt-python37-tkinter_3.7.17-38_arm64.deb
    sha:356761e7c5527d61972b4031b6618d4b298b94f9
  • alt-python37-tools_3.7.17-38_arm64.deb
    sha:8f3b95c1f2104ff2f0d4148c86b2c687957330ca
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.