[CLSA-2026:1789461197] Fix CVE(s): CVE-2026-9669
Type:
security
Severity:
Important
Release date:
2026-09-15 08:33:28 UTC
Description:
* SECURITY UPDATE: out-of-bounds stack write when a bz2 decompressor or BZ2File handle is reused after a decompression error - debian/patches/CVE-2026-9669.patch: record the bzlib error code on BZ2DecompObject and refuse further decompress() calls with ValueError in Modules/bz2module.c, so that crafted input can no longer make BZ2_bzDecompress() resume from an invalid internal state; also make the error sticky for the C BZ2File read paths, which re-entered the errored stream in the same way, and add regression tests for both - CVE-2026-9669
CVEs fixed:
Updated packages:
  • idle-python2.7_2.7.16-2+deb10u4+tuxcare.els5_all.deb
    sha:f26acc7d553af33b0f785e5ce03ad5d00ecc03c5
  • libpython2.7_2.7.16-2+deb10u4+tuxcare.els5_amd64.deb
    sha:b3f16de862a90ec8af29a5bd9d66c9aecf0c8c10
  • libpython2.7-dev_2.7.16-2+deb10u4+tuxcare.els5_amd64.deb
    sha:739bbdac4b665242333ffee3a76c6fd869207d81
  • libpython2.7-minimal_2.7.16-2+deb10u4+tuxcare.els5_amd64.deb
    sha:f052a16568175f46d4b3a6080aa94b32ea32cdda
  • libpython2.7-stdlib_2.7.16-2+deb10u4+tuxcare.els5_amd64.deb
    sha:70e225e4079374018cd3bcb9d3ee433107597895
  • libpython2.7-testsuite_2.7.16-2+deb10u4+tuxcare.els5_all.deb
    sha:84b593b09926177fd8e3527d845249868aabe9d3
  • python2.7_2.7.16-2+deb10u4+tuxcare.els5_amd64.deb
    sha:20dc61490931f85cec9d72dbd6fac3aa59dbcd9b
  • python2.7-dev_2.7.16-2+deb10u4+tuxcare.els5_amd64.deb
    sha:3d9f9712c02236f71341b3e71a92f7fae8701610
  • python2.7-doc_2.7.16-2+deb10u4+tuxcare.els5_all.deb
    sha:cdebd35e07ae826196efe66295c990c43e6b9996
  • python2.7-examples_2.7.16-2+deb10u4+tuxcare.els5_all.deb
    sha:858e14f74467cab9831ee6914e4dd481b2c855e7
  • python2.7-minimal_2.7.16-2+deb10u4+tuxcare.els5_amd64.deb
    sha:8560f2ef2e5d29e3717d96f7399385825f163e15
  • libpython2.7_2.7.16-2+deb10u4+tuxcare.els5_arm64.deb
    sha:85f4b533bcd42d9d06fd9539ab77dd91f3a1a02b
  • libpython2.7-dev_2.7.16-2+deb10u4+tuxcare.els5_arm64.deb
    sha:50ce83243c9b8ef38d5f2e8524de8b5241474586
  • libpython2.7-minimal_2.7.16-2+deb10u4+tuxcare.els5_arm64.deb
    sha:1254beeaca351cb6cfe2a84a9a141ff0ed0c7789
  • libpython2.7-stdlib_2.7.16-2+deb10u4+tuxcare.els5_arm64.deb
    sha:1fb768dfbdae990037aa77a1e9e6ff17c889dae3
  • python2.7_2.7.16-2+deb10u4+tuxcare.els5_arm64.deb
    sha:c989a3387355b720a84c6b79cd9170fa96786382
  • python2.7-dev_2.7.16-2+deb10u4+tuxcare.els5_arm64.deb
    sha:eed23ef5200993a6e2e8dcab3ec6e549d52aecda
  • python2.7-minimal_2.7.16-2+deb10u4+tuxcare.els5_arm64.deb
    sha:092a90ae319f9de89fcd4ab8b87264ef3934859e
  • libpython2.7_2.7.16-2+deb10u4+tuxcare.els5_armel.deb
    sha:da0518abd17717effe7a6b52e70f7eb76bb6e138
  • libpython2.7-dev_2.7.16-2+deb10u4+tuxcare.els5_armel.deb
    sha:0c32ecd081121671a7320ecae32cc4bfdcc9165a
  • libpython2.7-minimal_2.7.16-2+deb10u4+tuxcare.els5_armel.deb
    sha:c6697b3c9883145b835160574d520e8944f51a24
  • libpython2.7-stdlib_2.7.16-2+deb10u4+tuxcare.els5_armel.deb
    sha:8b6028b1906891ac9497c7c724588009ef5deecd
  • python2.7_2.7.16-2+deb10u4+tuxcare.els5_armel.deb
    sha:3e3f180b2d4e2f9197588c59be4aa41a6c16fd71
  • python2.7-dev_2.7.16-2+deb10u4+tuxcare.els5_armel.deb
    sha:1bf1fe6dc30e5dc0cde37c43d943caaa74997f20
  • python2.7-minimal_2.7.16-2+deb10u4+tuxcare.els5_armel.deb
    sha:4c2356a95014ab1049b34ce15f586f87fafb3f57
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.