Release date:
2026-10-13 19:32:00 UTC
Description:
- CVE-2026-8328: stop ftplib.ftpcp() trusting the IPv4 address the source
server advertises in its PASV reply, completing the CVE-2021-4189 fix
- CVE-2026-15806: scope HTTPPasswordMgr credentials by URL scheme, so a
credential stored for an https URI is no longer sent to the matching http URI
- CVE-2026-19672: normalize tar member names containing .. components in the
tarfile tar/data extraction filters, so a name that leaves the destination and
comes back no longer creates directories outside the destination
- CVE-2026-87910: honor a None result from the extraction filter when tarfile
falls back to extracting a hardlink target, so a rejected member is skipped
instead of being written at the link's path
Updated packages:
-
python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els39.noarch.rpm
sha:cea246803353232c71aee7da45dad92a0ed8e925bcd819b1510be7082fa38914
-
python3-3.9.16-1.el9_2.2.tuxcare.els39.aarch64.rpm
sha:2d8e7f5609916f55d9a62e55c86e01d8f3f4f6f0813258c27884b66273823375
-
python3-3.9.16-1.el9_2.2.tuxcare.els39.i686.rpm
sha:f15ef0d539462e4ee2cc216b4e2be83e8f7a616e32f4425ae248e445294555d9
-
python3-3.9.16-1.el9_2.2.tuxcare.els39.x86_64.rpm
sha:bedcae7841a605e57105f1f74fa186bcdbc98e99925b897f19ce10676cfee5d3
-
python3-debug-3.9.16-1.el9_2.2.tuxcare.els39.aarch64.rpm
sha:cd616779d51d647eb1263295caf5c0a83a715ea6d7464d10db239d6724b0dccf
-
python3-debug-3.9.16-1.el9_2.2.tuxcare.els39.i686.rpm
sha:c4ef06ee71c4bf7d8ccc424b451ea7b1f48305f0013f628b09e11e4d82a1b690
-
python3-debug-3.9.16-1.el9_2.2.tuxcare.els39.x86_64.rpm
sha:46beccc98da3185a080f8c9759231e23038ab731a0f273556440b8fdfa2b5e09
-
python3-devel-3.9.16-1.el9_2.2.tuxcare.els39.aarch64.rpm
sha:d1949f916d131e8e37939a483dafffcce8c922500cc9ad3bfdf40f633bce8a47
-
python3-devel-3.9.16-1.el9_2.2.tuxcare.els39.i686.rpm
sha:e823b01b23a76b5a23ad02e24ef828557ed645b8d94b8a442a503fa8498247e1
-
python3-devel-3.9.16-1.el9_2.2.tuxcare.els39.x86_64.rpm
sha:81178c7e89edb8a16163ffdd99b9b2c44162f3f69027552c6b7c8d0de6377a32
-
python3-idle-3.9.16-1.el9_2.2.tuxcare.els39.aarch64.rpm
sha:8552ad471cc21af94c118000fe4fe190bdd487ab829e4f18bdd3d3c0a4689443
-
python3-idle-3.9.16-1.el9_2.2.tuxcare.els39.i686.rpm
sha:afb98ce26c745180c111763f41d54bef68ca796f190c54f79bebd813cf1f28d5
-
python3-idle-3.9.16-1.el9_2.2.tuxcare.els39.x86_64.rpm
sha:767dbfb0b52d31b854286d06e07b130fcd14fb7d8a30aa99434f0fdaf547e1b8
-
python3-libs-3.9.16-1.el9_2.2.tuxcare.els39.aarch64.rpm
sha:42971e245c212aa59fffa3a49094d7aca34e44494ddb65385258d7f06c42d73a
-
python3-libs-3.9.16-1.el9_2.2.tuxcare.els39.i686.rpm
sha:9d61e295eb2c3b43c92ecd894df915ecd51bf853fafb3ceaae68dc5d07e0725d
-
python3-libs-3.9.16-1.el9_2.2.tuxcare.els39.x86_64.rpm
sha:974566de0cdbda7a2dc411bd525f15e6ba1b1b260afc4971fd0adbd2f8c7fbf2
-
python3-test-3.9.16-1.el9_2.2.tuxcare.els39.aarch64.rpm
sha:117b38bacbcd79547715b651f5ffe431da1fd1e1d5990bb25d1ec9131008d83e
-
python3-test-3.9.16-1.el9_2.2.tuxcare.els39.i686.rpm
sha:3410ce072e92286771d18a896aa7eeda17ff0f78179ee31a673ad57551435833
-
python3-test-3.9.16-1.el9_2.2.tuxcare.els39.x86_64.rpm
sha:1e9f20cc05e2dcc6f56c1d7ab5c130d61e4163080cc80746531cca8472fbe0c4
-
python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els39.aarch64.rpm
sha:8a441647568fbe152cf102f8bd3425518c8d870e93337162f84e82af8457a778
-
python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els39.i686.rpm
sha:927af1b3f821ef84d5da7b4c728cda7eb6cad40377b0a03a898ae2f23daca12f
-
python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els39.x86_64.rpm
sha:9e5d616c44e34d5a828a12159e00f1ee3ad40a085570b655a1b298dd776f40a8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
