Release date:
2026-10-13 19:53:19 UTC
Description:
- CVE-2026-6879: xml.etree.ElementPath: avoid quadratic behaviour in XPath index
predicates ([1], [last()], [last()-N])
- CVE-2026-18503: fix quadratic time in csv.Sniffer for quoted fields
- Backport upstream 3.11 fixes the CVE-2026-18503 fix relies on or completes:
correct matching of possessive quantifiers in the re engine (gh-106052,
gh-100061) and super-linear doublequote detection in csv.Sniffer (gh-109638)
Updated packages:
-
python3.11-3.11.2-2.el9_2.2.tuxcare.els39.aarch64.rpm
sha:964b6f6ea90b0b49900c688b03217e846e530db8eae7eef29c3c4fc555899bac
-
python3.11-3.11.2-2.el9_2.2.tuxcare.els39.i686.rpm
sha:fa61231fc893e3a0e91c54b7e480564d16a03b1fdb921ab5efc4951a50ec6ea4
-
python3.11-3.11.2-2.el9_2.2.tuxcare.els39.x86_64.rpm
sha:23da0d8adaab0ef3c6a31717da98a998efff3a18e27d8c3bf5ce26ce5068f814
-
python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els39.aarch64.rpm
sha:5e2d29bdfe1796d5e3d663b3124348186c8015520fe5e2142ec5c2b40555c4db
-
python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els39.i686.rpm
sha:b3645e096ef69da0742cbe364800e7d03891bdf64dc34148e096f663c544a6dc
-
python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els39.x86_64.rpm
sha:d24dbf9c56a14e6951af8bbf8013c1560079d37cacec56b3cb1dfced871d94ff
-
python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els39.aarch64.rpm
sha:884043453142a5f86e042ad05c1b73fa4f0c611512bcd67d2b6b67ff62f8537e
-
python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els39.i686.rpm
sha:f64859d03c8c6166816e7bac602403d6ef7214100e696dcabf6c8137701c2a5b
-
python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els39.x86_64.rpm
sha:601834b9345f9a1c768f66fb3616d3ceb6f5eea2ffbbc7e548412b3a070c0668
-
python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els39.aarch64.rpm
sha:7e7fc38125ffd79c0bd0b7df360a58028b83dd0c16323a1b0abf5ef59f622298
-
python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els39.i686.rpm
sha:5908cc8a79d538c7233da5ccd364ffe708b8f847c6b5f37f2667ad049be7b6f8
-
python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els39.x86_64.rpm
sha:2fda424301501375eb5b3d011840c79f82a5fc6d3bc84aa984b85dae323297c6
-
python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els39.aarch64.rpm
sha:928258ca5f224bf44a2a541b5a15e879ec3ac715c8bd88a85574e1593e4c2be1
-
python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els39.i686.rpm
sha:c7aa625b9f32f36738731f6c9d465e9a64155a8a957ce4b1710daea4fabd3fcb
-
python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els39.x86_64.rpm
sha:d0b9b1a6897616ee7027402ee0f7f0c1c2d7838755d169e256b0f137d6899ab6
-
python3.11-test-3.11.2-2.el9_2.2.tuxcare.els39.aarch64.rpm
sha:b7a780ac0c7b75c930476880be614e8a9ba97da4f39c988abcc605a44e65ac55
-
python3.11-test-3.11.2-2.el9_2.2.tuxcare.els39.i686.rpm
sha:0df31c4bbbab0b25094bdd196aa7ce57bd3170fd85a42b6a35f1ba3f71cad9fd
-
python3.11-test-3.11.2-2.el9_2.2.tuxcare.els39.x86_64.rpm
sha:ef4de1606449b62ea2cbbe70c28ade0e2e04c9bc963afeb02c683b3104a5e3fb
-
python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els39.aarch64.rpm
sha:4360889d5c202a3d61c5325e42eb7ecddf08eae4b7cf96f0cfbbb28c9a5774e0
-
python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els39.i686.rpm
sha:081f1d3b9a471646285d9d0f56247ccf259f9aa36b35331a38b9cc71c47aa54f
-
python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els39.x86_64.rpm
sha:fe6f2c7938fa586eeaf8a80c10982d738a97d3de0d298821db319880cecb904d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.