[CLSA-2026:1789736914] python3: Fix of 5 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-18 13:08:48 UTC
Description:
- CVE-2026-82049: tarfile: resolve a hard link's target before recreating it so a link to a symlink stored deeper in the archive can no longer be duplicated at a shallower path, where its relative target escapes the destination
CVEs fixed:
Updated packages:
  • platform-python-3.6.8-40.el8_4.tuxcare.els27.i686.rpm
    sha:bdfbfdd2db2991fdf9e24e129a8a904d1c6521a24b362543b8ac300e5ef0834f
  • platform-python-3.6.8-40.el8_4.tuxcare.els27.x86_64.rpm
    sha:866cf3bdfef6fde979c703148c7ec333ab0272c2f945f44468c73f0e114ce367
  • platform-python-debug-3.6.8-40.el8_4.tuxcare.els27.i686.rpm
    sha:8007b8f51c95d022e6b8dfe794f6136c33144e0ca19af29987ff3e3eeac9d14c
  • platform-python-debug-3.6.8-40.el8_4.tuxcare.els27.x86_64.rpm
    sha:4306dd53898c7836bb1126b95b0af5cb4e758aadb5bd80ec684c63f34df7c641
  • platform-python-devel-3.6.8-40.el8_4.tuxcare.els27.i686.rpm
    sha:87c3d9a5994cdce6b3be780b78fe4975b33f9a1dee15e42ef244b3acbba7b2c8
  • platform-python-devel-3.6.8-40.el8_4.tuxcare.els27.x86_64.rpm
    sha:02475e99f9bc97db282ea391d4a3808d091af45cfd6a9411a8e082c577e70ffa
  • python3-devel-3.6.8-40.el8_4.tuxcare.els27.x86_64.rpm
    sha:ae802dde39dbdedf930929eefd494c65659add9af4829ee0720d0c85acd6d9b7
  • python3-idle-3.6.8-40.el8_4.tuxcare.els27.i686.rpm
    sha:0c43fda4f36c63663aedd7876ccc92ac8e9758a55324bd70f41fc8d947b034e7
  • python3-idle-3.6.8-40.el8_4.tuxcare.els27.x86_64.rpm
    sha:f82ba057ee7e29034582822f47f2b590622b713c1ea9ec449863cff2312707da
  • python3-libs-3.6.8-40.el8_4.tuxcare.els27.i686.rpm
    sha:474541077024ed811696b31eb31b37cb23f62083a7907307d3e86707d29a572e
  • python3-libs-3.6.8-40.el8_4.tuxcare.els27.x86_64.rpm
    sha:5c110465ea2ead3eed2617e5f67fce7e112855419ca36c7b49c0d270525ee093
  • python3-test-3.6.8-40.el8_4.tuxcare.els27.i686.rpm
    sha:0955ede1a21866503c9fa9c6c4296130681c6c05c2933cbd3023cb24dd77de94
  • python3-test-3.6.8-40.el8_4.tuxcare.els27.x86_64.rpm
    sha:3b8b4bcd0c96bea649195968c76b5176869be215c6ce240445b9e6868d5f78e1
  • python3-tkinter-3.6.8-40.el8_4.tuxcare.els27.i686.rpm
    sha:38aa7ea5547528a5a02b0dbadd0dd29c6f2d6bb8973b64f0b97bd73f4f82a9e1
  • python3-tkinter-3.6.8-40.el8_4.tuxcare.els27.x86_64.rpm
    sha:364fe6bd097b11ee7c88b8f9d16558c6bd6fc1a5313eddc1f6aeab874e0edda6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.