[CLSA-2026:1789719259] Fix CVE(s): CVE-2026-11972
Type:
security
Severity:
Important
Release date:
2026-09-18 08:14:31 UTC
Description:
* SECURITY UPDATE: denial of service when seeking a tar stream - debian/patches/CVE-2026-11972.patch: break out of the block-read loop in _Stream.seek() in Lib/tarfile.py once read() returns no data, so a member header declaring a huge size no longer drives an unbounded read loop past end of stream - CVE-2026-11972
CVEs fixed:
Updated packages:
  • idle-python2.7_2.7.18-8+deb11u1+tuxcare.els2_all.deb
    sha:8d7c63992f41d0387a64547dd24804f2e901e59c
  • libpython2.7_2.7.18-8+deb11u1+tuxcare.els2_amd64.deb
    sha:df5d111801b23db5640e0fb3db2aa778bd69d12b
  • libpython2.7-dev_2.7.18-8+deb11u1+tuxcare.els2_amd64.deb
    sha:f595da75c71bdc990944dcc7aa1b9082a3278fcd
  • libpython2.7-minimal_2.7.18-8+deb11u1+tuxcare.els2_amd64.deb
    sha:f83dce53ebb7d41baa83634c37198160f3d9981f
  • libpython2.7-stdlib_2.7.18-8+deb11u1+tuxcare.els2_amd64.deb
    sha:b8ac0f682ec4ae55eab7717a44d3a390da673fb7
  • libpython2.7-testsuite_2.7.18-8+deb11u1+tuxcare.els2_all.deb
    sha:ce3ab72753c2141c6742f405a5a90ec945f32a4f
  • python2.7_2.7.18-8+deb11u1+tuxcare.els2_amd64.deb
    sha:52f83e8237c829d7c586084a6653459aec2e681f
  • python2.7-dev_2.7.18-8+deb11u1+tuxcare.els2_amd64.deb
    sha:958ff5e14739a2dcc5ebe19c51ebdba7ff296ab5
  • python2.7-doc_2.7.18-8+deb11u1+tuxcare.els2_all.deb
    sha:ca81beaa955b56ac42fa9784f83f5296a6e138b0
  • python2.7-examples_2.7.18-8+deb11u1+tuxcare.els2_all.deb
    sha:bb6289ec08aca21a152f302b7c93a9d7a2fb37fb
  • python2.7-minimal_2.7.18-8+deb11u1+tuxcare.els2_amd64.deb
    sha:10d8068518bea3f56bf0055f8313ea322c9ce6b4
  • libpython2.7_2.7.18-8+deb11u1+tuxcare.els2_arm64.deb
    sha:605b5844f850cf766bd419cc928cf2318de4f65f
  • libpython2.7-dev_2.7.18-8+deb11u1+tuxcare.els2_arm64.deb
    sha:fc09b08a1ba53b19073c564c0115fd4de1b46b26
  • libpython2.7-minimal_2.7.18-8+deb11u1+tuxcare.els2_arm64.deb
    sha:73c3a4ac7284a8f3a4f78184543b0beca56c0e2c
  • libpython2.7-stdlib_2.7.18-8+deb11u1+tuxcare.els2_arm64.deb
    sha:66594d7020cfb3a250c001ccc50e882a096a7623
  • python2.7_2.7.18-8+deb11u1+tuxcare.els2_arm64.deb
    sha:7c3bd6aaed6167f230a604d4feb377fe5e5b5a74
  • python2.7-dev_2.7.18-8+deb11u1+tuxcare.els2_arm64.deb
    sha:7aa888e4ce7715908076cee0868d168fa3e567a9
  • python2.7-minimal_2.7.18-8+deb11u1+tuxcare.els2_arm64.deb
    sha:f972d4775978212744c08fa70417c84a61cb6ed7
  • libpython2.7_2.7.18-8+deb11u1+tuxcare.els2_armel.deb
    sha:fcb99b1d1d28690909c2ad8050c4f072ca8b60bd
  • libpython2.7-dev_2.7.18-8+deb11u1+tuxcare.els2_armel.deb
    sha:61010acf5ef7b987018bc502ca08a0f39f799998
  • libpython2.7-minimal_2.7.18-8+deb11u1+tuxcare.els2_armel.deb
    sha:50df8b8cb52b9af6b8cfc90fdf55611bdfcda943
  • libpython2.7-stdlib_2.7.18-8+deb11u1+tuxcare.els2_armel.deb
    sha:5cf6f84ec55c4752cc2608cbd3def8bf5d17098b
  • python2.7_2.7.18-8+deb11u1+tuxcare.els2_armel.deb
    sha:236ccee809b7fc1e0a942e476c5025fdfa4ffcf8
  • python2.7-dev_2.7.18-8+deb11u1+tuxcare.els2_armel.deb
    sha:62cdab749d415a7b02c6980db192969d2fa0c5ee
  • python2.7-minimal_2.7.18-8+deb11u1+tuxcare.els2_armel.deb
    sha:5f11837ba97594637219171b680814bdd9230da1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.