Release date:
2026-10-17 13:02:45 UTC
Description:
- CVE-2026-11940: pass filter_function through TarFile.extract() so the hardlink-extraction fallback is filtered (prerequisite)
- CVE-2026-11940: filter the symlink at the hardlink's own path so a hardlink to a deeper symlink cannot recreate it at a shallower path and escape the destination directory
- CVE-2026-82049: resolve a hardlink's target with os.path.realpath() so extracting a hard link to a symlink cannot relocate that symlink and expose or modify files outside the destination
Updated packages:
-
python3-3.6.8-21.0.13.el7_9.tuxcare.els4.aarch64.rpm
sha:f674d9b988487553178fed783ea9a8fa125018c8598b6fa8a2a3bc9b156817bf
-
python3-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:5457a69aaeb22fcc496170ff3dcde8b04d9eb8080773e03576fdf5a6643f932e
-
python3-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:956894f884b233f6a2d28cf41ef4f831ffebaf59b0828c8c2c35c11ede8e365b
-
python3-debug-3.6.8-21.0.13.el7_9.tuxcare.els4.aarch64.rpm
sha:1696a7e76292bf632903c2b8241d2d499bd92d0e0cacc557bdbc8bcdd9338a45
-
python3-debug-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:eda5b5ae7cedf9972fab5485e236afb1a1185b4bb08c5035c0c5aa6276bd56e7
-
python3-debug-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:cf53c14bdeb16306c19df20a52c2d6f0d8ac8c923d605fdabc32d054d5af2df2
-
python3-devel-3.6.8-21.0.13.el7_9.tuxcare.els4.aarch64.rpm
sha:dffc04d0c6937d0e8b41c70eb345a9a972fbe6446a9fa21e7e14e7b7a9c75817
-
python3-devel-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:20dc2a309d13193e66d294fd9af0296096b5792493a0437152c9e1aa92ed903f
-
python3-devel-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:3e69949b95ab82eeee10a0fffb26c8f8a3afa4a760ba5073d99d3d085d8630a7
-
python3-idle-3.6.8-21.0.13.el7_9.tuxcare.els4.aarch64.rpm
sha:acffdb17e4b2b932be413e95d0fa39aa9e93469903afd8b3b6c5412f8bbe298e
-
python3-idle-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:696eeee99696b13d1be17532803d2728ded71ff160cd197c4e2a6d171f84c3f3
-
python3-idle-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:bb9c44b21f40ebb962a958ffee713ece1dcb33805be7ba6609991a11388bb2eb
-
python3-libs-3.6.8-21.0.13.el7_9.tuxcare.els4.aarch64.rpm
sha:3303c7210d781d4cf4efb2ac5d85d8eaa82144d42811cc8c66421925a3fe5bce
-
python3-libs-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:51ae49f88abfaf886d1c44e73c1262b2ddb8c83af717cec9d13a262583f1b15b
-
python3-libs-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:db812762fe462bbe013ae6eedc36d67ef1f30b7ecba24f06858ca3636abe6af9
-
python3-test-3.6.8-21.0.13.el7_9.tuxcare.els4.aarch64.rpm
sha:4d66b243427da188c42f6aa19e93ca3bd102a993cde1f2aeaa20fb8cae5b64fc
-
python3-test-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:afc1d17b4c1c83b44de6d12f66565fcffdbb45fc4cbe2ad0fac1ed5d28f1099c
-
python3-test-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:9a40796212a8d563cdacf681dfa5306995e94665e9f65c15ce5bed2cb3251601
-
python3-tkinter-3.6.8-21.0.13.el7_9.tuxcare.els4.aarch64.rpm
sha:c6b7ebdac8a59bf5a8ce335335dbbee6687b42e2141573589ecb3b22b3905707
-
python3-tkinter-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:bc6bc6de56d7385a555a2f3693884c4ba77960b10d80ba00864e4dd14692fd77
-
python3-tkinter-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:79502130f1090860009b382200711b2ba4380c34021565b351d59e2145fd7896
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
