Release date:
2026-09-07 15:20:53 UTC
Description:
- CVE-2026-0864: fix configuration injection in the ConfigParser module by
normalizing all line endings (CR, CRLF and LF) to LF+TAB when writing
multi-line values, so a carriage return in an attacker-controlled value
can no longer inject unexpected keys and values into the written file
Updated packages:
-
python-2.6.6-70.el6.tuxcare.els29.i686.rpm
sha:232ea74fee97444a25fb17fe1ae5d5f4d8754042cb98a708cc279cb374be49f6
-
python-2.6.6-70.el6.tuxcare.els29.x86_64.rpm
sha:26b483639b084fd41be42a6b5b1ef6758948c0eb45482c6d919dc74488e77029
-
python-devel-2.6.6-70.el6.tuxcare.els29.i686.rpm
sha:c2fff2ce940ba13802101fc2b18d226ca19eb2fe5433abbeffcf0dcef1442f5d
-
python-devel-2.6.6-70.el6.tuxcare.els29.x86_64.rpm
sha:371ee8b823410abc36ae86ce8c805391048dca62d38290dc27cb8636b440407c
-
python-libs-2.6.6-70.el6.tuxcare.els29.i686.rpm
sha:94e7dbf3b0f118fa2735afa35ef1e7d7c7bd6543ac0c188d0017f4410a5ef334
-
python-libs-2.6.6-70.el6.tuxcare.els29.x86_64.rpm
sha:78892cc8f7ef5da4600d9344c4278202a39ca5f97db43c4838b6258a6d33398a
-
python-test-2.6.6-70.el6.tuxcare.els29.x86_64.rpm
sha:f662298081b692171ca8dd2b7a466956f1f9fd738af0d7aa067bac10a583c15f
-
python-tools-2.6.6-70.el6.tuxcare.els29.x86_64.rpm
sha:550d22e0cf23ca659faf2d9f9d142bc87f9cdeec83cf4c481bb3ccdaa6098fe0
-
tkinter-2.6.6-70.el6.tuxcare.els29.x86_64.rpm
sha:30ce85066fc9aab03e27d191b38ef912b4cd19a03de6d077fc59546370356131
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
