[CLSA-2026:1791921187] python3.11: Fix of 2 CVEs
Type:
security
Severity:
Low
Release date:
2026-10-13 19:53:19 UTC
Description:
- CVE-2026-6879: xml.etree.ElementPath: avoid quadratic behaviour in XPath index predicates ([1], [last()], [last()-N]) - CVE-2026-18503: fix quadratic time in csv.Sniffer for quoted fields - Backport upstream 3.11 fixes the CVE-2026-18503 fix relies on or completes: correct matching of possessive quantifiers in the re engine (gh-106052, gh-100061) and super-linear doublequote detection in csv.Sniffer (gh-109638)
Updated packages:
  • python3.11-3.11.2-2.el9_2.2.tuxcare.els39.aarch64.rpm
    sha:964b6f6ea90b0b49900c688b03217e846e530db8eae7eef29c3c4fc555899bac
  • python3.11-3.11.2-2.el9_2.2.tuxcare.els39.i686.rpm
    sha:fa61231fc893e3a0e91c54b7e480564d16a03b1fdb921ab5efc4951a50ec6ea4
  • python3.11-3.11.2-2.el9_2.2.tuxcare.els39.x86_64.rpm
    sha:23da0d8adaab0ef3c6a31717da98a998efff3a18e27d8c3bf5ce26ce5068f814
  • python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els39.aarch64.rpm
    sha:5e2d29bdfe1796d5e3d663b3124348186c8015520fe5e2142ec5c2b40555c4db
  • python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els39.i686.rpm
    sha:b3645e096ef69da0742cbe364800e7d03891bdf64dc34148e096f663c544a6dc
  • python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els39.x86_64.rpm
    sha:d24dbf9c56a14e6951af8bbf8013c1560079d37cacec56b3cb1dfced871d94ff
  • python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els39.aarch64.rpm
    sha:884043453142a5f86e042ad05c1b73fa4f0c611512bcd67d2b6b67ff62f8537e
  • python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els39.i686.rpm
    sha:f64859d03c8c6166816e7bac602403d6ef7214100e696dcabf6c8137701c2a5b
  • python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els39.x86_64.rpm
    sha:601834b9345f9a1c768f66fb3616d3ceb6f5eea2ffbbc7e548412b3a070c0668
  • python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els39.aarch64.rpm
    sha:7e7fc38125ffd79c0bd0b7df360a58028b83dd0c16323a1b0abf5ef59f622298
  • python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els39.i686.rpm
    sha:5908cc8a79d538c7233da5ccd364ffe708b8f847c6b5f37f2667ad049be7b6f8
  • python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els39.x86_64.rpm
    sha:2fda424301501375eb5b3d011840c79f82a5fc6d3bc84aa984b85dae323297c6
  • python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els39.aarch64.rpm
    sha:928258ca5f224bf44a2a541b5a15e879ec3ac715c8bd88a85574e1593e4c2be1
  • python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els39.i686.rpm
    sha:c7aa625b9f32f36738731f6c9d465e9a64155a8a957ce4b1710daea4fabd3fcb
  • python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els39.x86_64.rpm
    sha:d0b9b1a6897616ee7027402ee0f7f0c1c2d7838755d169e256b0f137d6899ab6
  • python3.11-test-3.11.2-2.el9_2.2.tuxcare.els39.aarch64.rpm
    sha:b7a780ac0c7b75c930476880be614e8a9ba97da4f39c988abcc605a44e65ac55
  • python3.11-test-3.11.2-2.el9_2.2.tuxcare.els39.i686.rpm
    sha:0df31c4bbbab0b25094bdd196aa7ce57bd3170fd85a42b6a35f1ba3f71cad9fd
  • python3.11-test-3.11.2-2.el9_2.2.tuxcare.els39.x86_64.rpm
    sha:ef4de1606449b62ea2cbbe70c28ade0e2e04c9bc963afeb02c683b3104a5e3fb
  • python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els39.aarch64.rpm
    sha:4360889d5c202a3d61c5325e42eb7ecddf08eae4b7cf96f0cfbbb28c9a5774e0
  • python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els39.i686.rpm
    sha:081f1d3b9a471646285d9d0f56247ccf259f9aa36b35331a38b9cc71c47aa54f
  • python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els39.x86_64.rpm
    sha:fe6f2c7938fa586eeaf8a80c10982d738a97d3de0d298821db319880cecb904d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.