[CLSA-2026:1789575335] Fix CVE(s): CVE-2026-9669
Type:
security
Severity:
Important
Release date:
2026-09-16 16:15:45 UTC
Description:
* SECURITY UPDATE: out-of-bounds write on bz2 decompressor and BZ2File reuse after a decompression error - debian/patches/CVE-2026-9669.patch: make a libbz2 decompression error sticky on the decompressor object and on the BZ2File read paths in Modules/bz2module.c, so a reused object can no longer re-enter BZ2_bzDecompress() on an errored stream and write out of bounds - CVE-2026-9669
CVEs fixed:
Updated packages:
  • idle-python2.7_2.7.12-1ubuntu0~16.04.18+tuxcare.els24_all.deb
    sha:9537fbf23e6a00fa7224edc4b4ae912bebc3f822
  • libpython2.7_2.7.12-1ubuntu0~16.04.18+tuxcare.els24_amd64.deb
    sha:66b1d79abc21c7ccf24d0114ca816e3a92756be6
  • libpython2.7-dev_2.7.12-1ubuntu0~16.04.18+tuxcare.els24_amd64.deb
    sha:e07b558fe97b34afc29f7e9f1d1602bed09ad3bb
  • libpython2.7-minimal_2.7.12-1ubuntu0~16.04.18+tuxcare.els24_amd64.deb
    sha:37eda37e7493505580eb2a8dbca8d13ebdc9b4fd
  • libpython2.7-stdlib_2.7.12-1ubuntu0~16.04.18+tuxcare.els24_amd64.deb
    sha:238100a9c31bedc943e47cc7d8f5815208c8a7e4
  • libpython2.7-testsuite_2.7.12-1ubuntu0~16.04.18+tuxcare.els24_all.deb
    sha:4f6f24ca180e222b30ef0b676140e5bbe5173714
  • python2.7_2.7.12-1ubuntu0~16.04.18+tuxcare.els24_amd64.deb
    sha:1427a5ce8e27c7b3b2ad0eb06c07b8fcb8afcbc4
  • python2.7-dev_2.7.12-1ubuntu0~16.04.18+tuxcare.els24_amd64.deb
    sha:1af23d40d4ba471eeaf3e2350d2456e627c70908
  • python2.7-doc_2.7.12-1ubuntu0~16.04.18+tuxcare.els24_all.deb
    sha:0688f59df529af7326d3a2be86b9c4d429088ffe
  • python2.7-examples_2.7.12-1ubuntu0~16.04.18+tuxcare.els24_all.deb
    sha:541b63dd1c42c409816f11fd99796858dde7deb7
  • python2.7-minimal_2.7.12-1ubuntu0~16.04.18+tuxcare.els24_amd64.deb
    sha:fcdaec5a00d3cb8f16c5042713273ef97665a6c1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.