Release date:
2026-11-10 11:24:02 UTC
Description:
- CVE-2026-114583: in the tarfile extraction filters, reject a link member
that names the destination directory itself, which would replace the
destination with a (sym)link and redirect all later members
- CVE-2026-116566: reject embedded null characters in the host and port
arguments of socket.getaddrinfo() instead of silently truncating them
Updated packages:
-
alt-python39-3.9.23-34.el8.x86_64.rpm
sha:69df393bc9a5721263c1c32f3e78b9cad8922ca3e0bf2f07e24c4580285510aa
-
alt-python39-debug-3.9.23-34.el8.x86_64.rpm
sha:df0f4d3d5982f5f354898444a989c38633380f2f19e875902c052271cc987e76
-
alt-python39-devel-3.9.23-34.el8.x86_64.rpm
sha:4c565d75e0f06a680d79c159ecd10800e03a7353b3af493b7598bbf38198bbdf
-
alt-python39-idle-3.9.23-34.el8.x86_64.rpm
sha:94f0072fc91d34477afc6d8a8302dbee5c664ccdfcbf6dda376bb04835978555
-
alt-python39-libs-3.9.23-34.el8.x86_64.rpm
sha:e2b635605345ff545d523cec7702a0335656eada47f07901b8a6c837a6e7f0ae
-
alt-python39-test-3.9.23-34.el8.x86_64.rpm
sha:fd4587a6f3d4531fb0fe8e8df08e4a4a6aa3b532a7fc60562e9434ab44ee0f8a
-
alt-python39-tkinter-3.9.23-34.el8.x86_64.rpm
sha:dd88414fb5b4b7d91515ace6d205ccca492b643cee3fc69157ac74bf04f7c9fb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
