[CLSA-2026:1789741774] python3.11: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-18 14:29:46 UTC
Description:
- CVE-2026-11972: stop tarfile._Stream.seek() looping over the declared block count once the stream is at EOF, so a crafted header advertising a huge member size can no longer make a streaming-mode read take exponentially longer - CVE-2026-9669: latch the libbz2 error in BZ2Decompressor and refuse further use with ValueError, so an application that retries a decompressor after an OSError can no longer re-enter BZ2_bzDecompress() on invalid internal state and drive out-of-bounds writes to a stack buffer
Updated packages:
  • python3.11-3.11.2-2.el9_2.2.tuxcare.els33.i686.rpm
    sha:c6cbb66a5ea0a1a4d35a40e733c93a82ff5c6618fdfbee9a907afdc9d25d34dc
  • python3.11-3.11.2-2.el9_2.2.tuxcare.els33.x86_64.rpm
    sha:38a6e011deee5ae33f58d51b1d05c7655869e02fc6fd51060979af01cd9c14fb
  • python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els33.i686.rpm
    sha:67785c5f7ff4b9be3f39c314d234d5fdc6638eac0053de93396cab0a9260838b
  • python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els33.x86_64.rpm
    sha:b3b067ecacbe123ccd4a8da2224226058445abb1b7652649cf59e463fc89f628
  • python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els33.i686.rpm
    sha:76a94e2c7133d606a8aeeeb3721cca9e58cb9e056ed8994613af893d21ba3fa0
  • python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els33.x86_64.rpm
    sha:380e91840331020873454ce217c3250d1c12a250edb66b36d206169375b01112
  • python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els33.i686.rpm
    sha:6257b376b3d73fcb0d8f1206ab46d49dd5f61346b1fc659c7e2f4ed8c53ffdd3
  • python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els33.x86_64.rpm
    sha:24d5c36e3d97b39d9d06fe9ed9b7416bbdcfc78231cfee950f8c95c3d24a8b9c
  • python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els33.i686.rpm
    sha:a1e937ecdff15a2bc6da9b1f9fdbbe2433b25d27d79729fff1db71a3aaf143b3
  • python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els33.x86_64.rpm
    sha:3216c1bde5c82419b5867edfb7ac97750a400e5669a51f18c6afb67892ae2d4c
  • python3.11-test-3.11.2-2.el9_2.2.tuxcare.els33.i686.rpm
    sha:b34f09ce66c722078de9b135fcee36b494ebd9ed0af12daa7ab1dab0ab9d73e8
  • python3.11-test-3.11.2-2.el9_2.2.tuxcare.els33.x86_64.rpm
    sha:76d57dbfef4151d6d8f917b9454aaa7a794f80607b1f91f4569db766987e276c
  • python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els33.i686.rpm
    sha:fd91bee28ab87a8f5f77789b6d8c2214b2d72d82f8e4e0e352647521fb93a5f9
  • python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els33.x86_64.rpm
    sha:1d695fa961a49e80aa66d82c7076dad6d37de60aec30062e44d52f268111558f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.