[CLSA-2026:1789993238] python3.9: Fix of 4 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-21 12:20:52 UTC
Description:
- CVE-2026-87910: tarfile: skip a link member when the extraction filter returns None for its hardlink-extraction fallback instead of ignoring the filter result - CVE-2026-17084: stringprep: build the RFC 3454 B.2/B.3 tables from Unicode 3.2.0 data so IDNA 2003 encoding of newly case-folding characters no longer depends on the interpreter's Unicode version - CVE-2026-15310: zipfile: bound the output of each bzip2/LZMA decompress() call so a small crafted member cannot trigger an unbounded allocation - CVE-2026-9669: bz2: refuse to reuse a BZ2Decompressor after a decompression error, so retrying with the same object can no longer resume from an invalid internal state and write out of bounds
Updated packages:
  • python-unversioned-command-3.9.21-2.el9_6.2.tuxcare.els21.noarch.rpm
    sha:f9353180f573c82fe0d55364dd22927e094ddbf31edb39026d48eea101477cbb
  • python3-3.9.21-2.el9_6.2.tuxcare.els21.i686.rpm
    sha:d47c3ce61c974c0effb14b1f2dbd8facbd823db637d0c3932fbc57712bb42308
  • python3-3.9.21-2.el9_6.2.tuxcare.els21.x86_64.rpm
    sha:fcdfe71cf9601e00984836d5ee306ae51d5c2d3d2dc1a9ef8fe2ec4b3e96ff54
  • python3-debug-3.9.21-2.el9_6.2.tuxcare.els21.i686.rpm
    sha:a893b31c7f35da2e1532ad1781feaea1536577fd27d7cacf0b77d79e803cdc49
  • python3-debug-3.9.21-2.el9_6.2.tuxcare.els21.x86_64.rpm
    sha:a119bb0cb76be6bc49d580f31e12c51a6117154f6dafc4eac834a2179148b700
  • python3-devel-3.9.21-2.el9_6.2.tuxcare.els21.i686.rpm
    sha:1c848ecfafb86a9767ac8ff659f4ca3f890042e325f705ba37e127e703c6f1ca
  • python3-devel-3.9.21-2.el9_6.2.tuxcare.els21.x86_64.rpm
    sha:d93f5c5512719a4a591b8832cfce5d5387881b98f83255c550a4f36d34f95915
  • python3-idle-3.9.21-2.el9_6.2.tuxcare.els21.i686.rpm
    sha:54ec66acc77e751e28fbc1300369a15b562a4f0c0fe5a983e337e664448c158c
  • python3-idle-3.9.21-2.el9_6.2.tuxcare.els21.x86_64.rpm
    sha:9b22ff5e9bf8c9bd35032072a1f4d340dda9d8d3cd29f2f0c9a1a5bec3deb6d9
  • python3-libs-3.9.21-2.el9_6.2.tuxcare.els21.i686.rpm
    sha:7b5e47693fdeb80e874ab3acf9c1b6ad54b717ecd82ca5802c9438f38bd7425e
  • python3-libs-3.9.21-2.el9_6.2.tuxcare.els21.x86_64.rpm
    sha:b6bb69c6d325fae8f6c62df3b3fb0497d2944880975afb39a43b8a2d1151cbf4
  • python3-test-3.9.21-2.el9_6.2.tuxcare.els21.i686.rpm
    sha:8a1e20c6e9fa5abde0943d7be782358296b22b5ea119533060b9782fef7a94b6
  • python3-test-3.9.21-2.el9_6.2.tuxcare.els21.x86_64.rpm
    sha:592cb185d79a258134216d2772d57349c6476d9767189792e803e70fdda36a9d
  • python3-tkinter-3.9.21-2.el9_6.2.tuxcare.els21.i686.rpm
    sha:a97d50fb1f5cec7ddbdc20fca536f38242055a64cfcf8de404393a455a81a376
  • python3-tkinter-3.9.21-2.el9_6.2.tuxcare.els21.x86_64.rpm
    sha:57ffd2aed5c2b85def1c4c31841061fc37ca3883e520a1ca13030803558bcaa0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.