[CLSA-2026:1786091187] python: Fix of CVE-2026-11972
Type:
security
Severity:
Important
Release date:
2026-08-08 21:23:30 UTC
Description:
- CVE-2026-11972: fix an unbounded loop (CPU DoS) in the tarfile module when a member header in a streaming-mode archive (mode="r|") declares a huge size, by breaking out of the _Stream.seek() read loop at EOF
CVEs fixed:
Updated packages:
  • python-2.6.6-70.el6.tuxcare.els28.i686.rpm
    sha:6c9a102b639609f7e5a24f43d2f2c6cfcd08867ec32c2bb2e34e7f470871d5eb
  • python-2.6.6-70.el6.tuxcare.els28.x86_64.rpm
    sha:f0f6f67c0fdac95f27ae944596ffa41d5857c4c07e03f8fb5ecb2ba5d4fa66fd
  • python-devel-2.6.6-70.el6.tuxcare.els28.i686.rpm
    sha:2f5f6a27147782e823a543146a0350cb7c7ef700eda01ad276798df9d7006963
  • python-devel-2.6.6-70.el6.tuxcare.els28.x86_64.rpm
    sha:450a44f2399546ccde5353549fd51d3bae04868364faaeb0624e72157a4b2cfd
  • python-libs-2.6.6-70.el6.tuxcare.els28.i686.rpm
    sha:d62e86613175e1bd16511e14b6bb5ba2beee6d5a03f08326db103631ae0234f3
  • python-libs-2.6.6-70.el6.tuxcare.els28.x86_64.rpm
    sha:50aa8b3b8a87470c953ba3c93e4e290b500674a87df8bb6a8ac2f1b112fa119d
  • python-test-2.6.6-70.el6.tuxcare.els28.x86_64.rpm
    sha:5a70776a7b4a8be3d95d74c8e7b92d04028e1bb91a06839dc1ebf3d1ba3395a8
  • python-tools-2.6.6-70.el6.tuxcare.els28.x86_64.rpm
    sha:5f6e05e8bc384357bc51f98207cf83b815909c821d480e5cec3f6be92266c6c0
  • tkinter-2.6.6-70.el6.tuxcare.els28.x86_64.rpm
    sha:463d4e0fa247457ad552d351bfae6c1fc873f95f25d06fa793af174b1ea3ea62
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.