Release date:
2026-09-07 08:22:13 UTC
Description:
- CVE-2026-11940: validate the hardlink-extraction fallback target against the
name the link is recreated at in tarfile's makelink_with_filter(), so a
crafted archive can no longer smuggle a symlink stored at a deeper name out
of the destination directory, and route the extraction filter through
TarFile.extract() so single-member extraction is covered by that check and
not only extractall()
Updated packages:
-
python-unversioned-command-3.9.21-2.el9_6.2.tuxcare.els19.noarch.rpm
sha:28938eafc4c122a9b4b4db3f8887adc3794c547ecd9f243e341a91eb29da528c
-
python3-3.9.21-2.el9_6.2.tuxcare.els19.i686.rpm
sha:5f3100e4846764554fb3265d4b7f598734e8f3af970716feea93c407a3e94efb
-
python3-3.9.21-2.el9_6.2.tuxcare.els19.x86_64.rpm
sha:5c9f61c3f15d11fa390dac11b43260c0a98b316101f7cafef0f95c425ed28b84
-
python3-debug-3.9.21-2.el9_6.2.tuxcare.els19.i686.rpm
sha:7b51a3bb11943db292e4669a08e53d417c4aeee047a66c1e55087ddb13ec2ce7
-
python3-debug-3.9.21-2.el9_6.2.tuxcare.els19.x86_64.rpm
sha:f0dd7740fbe88e159422cbfa502edfd1bac1839eb30584ad08b46867037410d9
-
python3-devel-3.9.21-2.el9_6.2.tuxcare.els19.i686.rpm
sha:cccc7f09bcdd819a2df05d2eaa28b02603765a52a112602392686bd07f28e88a
-
python3-devel-3.9.21-2.el9_6.2.tuxcare.els19.x86_64.rpm
sha:b6d15fc1b8620f0591a608d0046bb2574734beec9b127c581bf476a03671541a
-
python3-idle-3.9.21-2.el9_6.2.tuxcare.els19.i686.rpm
sha:445b838cb8928978616bdae7db970ffdb0942a2cd300365f1ac08c2ae5e0a4c1
-
python3-idle-3.9.21-2.el9_6.2.tuxcare.els19.x86_64.rpm
sha:d6d756a1f4522316765789abd3e9faca9f191daeb0fd1788b82f983ca4f69da9
-
python3-libs-3.9.21-2.el9_6.2.tuxcare.els19.i686.rpm
sha:2b97def62d881dbffdd3c6830425ed110a794247726cd29c9233f5ea8849ef30
-
python3-libs-3.9.21-2.el9_6.2.tuxcare.els19.x86_64.rpm
sha:3f632aab6a98b6621ccc42486f5286ac6dcbc88579b7e5d5a80ddbde8f1e2740
-
python3-test-3.9.21-2.el9_6.2.tuxcare.els19.i686.rpm
sha:fc03819d231fcefe76de90efe5ad2106196a608a385ad558db67ab6e7c856da3
-
python3-test-3.9.21-2.el9_6.2.tuxcare.els19.x86_64.rpm
sha:201cb0f922679ff8c7a1fcc09439a3cce676883773eff7923fadb1f0de04444e
-
python3-tkinter-3.9.21-2.el9_6.2.tuxcare.els19.i686.rpm
sha:2b51080b05cbf90754f61d35bc4fb66552175281fd3e68853e0fe45233748a6b
-
python3-tkinter-3.9.21-2.el9_6.2.tuxcare.els19.x86_64.rpm
sha:c368d96b40c883e34f3a41f51d2100298ae9303f2cc88b1bbebf15f3a97897c7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
