[CLSA-2026:1791359868] python3.11: Fix of CVE-2026-12345
Type:
security
Severity:
Moderate
Release date:
2026-10-07 07:57:58 UTC
Description:
- CVE-2026-12345: fix symlink race in tempfile.TemporaryDirectory cleanup that could delete or chmod files outside the temporary directory - Backport upstream 3.11 hardening the fix builds on: handle os.close() errors in shutil.rmtree() (bpo-35332), don't mask PermissionError during cleanup (bpo-43153), fix cleanup recursion error (gh-79325)
CVEs fixed:
Updated packages:
  • python3.11-3.11.2-2.el9_2.2.tuxcare.els36.aarch64.rpm
    sha:d7d77037a91a31a2073ceb1d2f6d61f309467a2ad797b8ab3cc9881c7010ec8b
  • python3.11-3.11.2-2.el9_2.2.tuxcare.els36.i686.rpm
    sha:1c55206fc08f86b467431aea8f01d90a3e5908cb77c94a0d7182e0e8c1a946a6
  • python3.11-3.11.2-2.el9_2.2.tuxcare.els36.x86_64.rpm
    sha:b8bcb6abb96a376490e73758386bf565f905b341b3610d5213c5461399734e77
  • python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els36.aarch64.rpm
    sha:8ab5dcd9ca003771e1dec2d58a564b931372b85f715871b9bbbcea0c500ce57b
  • python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els36.i686.rpm
    sha:c1f25e49856f7c8e6657e481a61de7910fd67066724985bff6a3ce5f4a6be9d2
  • python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els36.x86_64.rpm
    sha:9375527fa14c319668dbb6e08e085db7dc53e6cdcc0ac466af32b7a0b0272353
  • python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els36.aarch64.rpm
    sha:c5f918021f7c42b9f5fc4a9ce08190176664849cd890f5cac3d9e8783eba6c66
  • python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els36.i686.rpm
    sha:e93f22440f0ff6be7e6f471ca74215c42e5e41573462c8ad2e8f475c20d8e2fa
  • python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els36.x86_64.rpm
    sha:9a92aa03b25041a8f3749a36da4e1ddd941fcf7cc58e11cab078e6e829efeb8a
  • python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els36.aarch64.rpm
    sha:b367e6b0ed635892628edb1aa8e28d6fc7fbcdf2df7d5500e1c99ffc059de64b
  • python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els36.i686.rpm
    sha:c1607509ee2ad49b8b4ae5b02cee187fbbf28c75b69a7526184f062b78388d75
  • python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els36.x86_64.rpm
    sha:d6eeed4f3a0c1cabc7e07a7d04270f788b8157384b6e43d7e61a51c4e9c0dfc7
  • python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els36.aarch64.rpm
    sha:44afb1ba8faa49b3eccd552451b9d8868405a89125547eea8055cbc0e12fde92
  • python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els36.i686.rpm
    sha:2b7a5af70883ccfc336cb16764cce83d4aeae948e9cc87fdae72cee98eba2c18
  • python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els36.x86_64.rpm
    sha:985c7f6ba09413090a0ea9fa24db78cc4343e4f00ee7f2940a55bbf8c39325a4
  • python3.11-test-3.11.2-2.el9_2.2.tuxcare.els36.aarch64.rpm
    sha:9215b19ec1e1c64f495d9c5a8cbe6872ec74316d163e9ea9dac3210c90061faa
  • python3.11-test-3.11.2-2.el9_2.2.tuxcare.els36.i686.rpm
    sha:9062ef3841260f0a406c96c7e5252f51babd8f750e8de9b1557882bc1eb03ce0
  • python3.11-test-3.11.2-2.el9_2.2.tuxcare.els36.x86_64.rpm
    sha:78ddcca05d40eef58c9ffe71b00f4e31fefcfb67727bcc2289894a24a05dea7c
  • python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els36.aarch64.rpm
    sha:c9ab7e04257423c9d11f24b99df738fd8667440f9605c6837435bc06fc923524
  • python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els36.i686.rpm
    sha:1518148b190d78b176a7b4a167f7152495619115a129d0013f48b7d4052d2d61
  • python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els36.x86_64.rpm
    sha:a401fabbc7cd7760f15cf647ea0ae407dbd9de3053418ff34e0b3e868f208c3f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.