Release date:
2026-11-10 10:48:09 UTC
Description:
- CVE-2026-114583: in the tarfile extraction filters, reject a link member
that names the destination directory itself, which would replace the
destination with a (sym)link and redirect all later members
- CVE-2026-116566: reject embedded null characters in the host and port
arguments of socket.getaddrinfo() instead of silently truncating them
Updated packages:
-
alt-python310-3.10.22-4.el8.x86_64.rpm
sha:1ad970fc49e245dbfa6fd49789fecb984e1027c660d35cc5c13efe04162be545
-
alt-python310-debug-3.10.22-4.el8.x86_64.rpm
sha:6e3220a9dff10c3a664bc2ad4031895e18cd92d1de619ad3cbacdae727851c8d
-
alt-python310-devel-3.10.22-4.el8.x86_64.rpm
sha:1d10f73b1bacc99a189a5915960f714effebc416786233e0347fe863eeb8363e
-
alt-python310-idle-3.10.22-4.el8.x86_64.rpm
sha:f0d01eb3476cc1d3b0064cc1adae8ca921614a17ff539e3664b4955a6820f54f
-
alt-python310-libs-3.10.22-4.el8.x86_64.rpm
sha:6b9ac2c581b5064fb629b52e96ef84f3510597e087b61c1d0aab1103e0ae7e41
-
alt-python310-test-3.10.22-4.el8.x86_64.rpm
sha:0e184803ad10cee4be16a2a9b986e43f7418f5f7bb2945648af82f41dd222e7c
-
alt-python310-tkinter-3.10.22-4.el8.x86_64.rpm
sha:1a2d7d8e6d2133acc4ec88a5997eb3011a929cc3bc060e8d9f3e0b8159518da7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
