Release date:
2026-09-17 09:15:29 UTC
Description:
* SECURITY UPDATE: quadratic parse time in the tarfile module when a
streaming archive declares an offset past the end of the stream
- debian/patches/CVE-2026-11972.patch: stop the forward-seek loop in
_Stream.seek() as soon as read() returns no data, in Lib/tarfile.py,
so a crafted mode="r|" archive can no longer keep the parser reading
an exhausted stream.
- CVE-2026-11972
* SECURITY UPDATE: out-of-bounds write when a bz2 decompressor is reused
after a decompression error
- debian/patches/CVE-2026-9669.patch: record the libbzip2 error in the
BZ2Decompressor object and refuse any further decompress() call with
ValueError, in Modules/_bz2module.c, so retrying with the same object
can no longer re-enter BZ2_bzDecompress() on a bz_stream left in an
invalid internal state.
- CVE-2026-9669
Updated packages:
-
idle-python3.6_3.6.9-1~18.04ubuntu1.12+tuxcare.els26_all.deb
sha:e82a9ef97f5f84ae23186f192b6189c437acd151
-
libpython3.6_3.6.9-1~18.04ubuntu1.12+tuxcare.els26_amd64.deb
sha:c557679e7bf4bda85bd44aff41acd7db75639d06
-
libpython3.6-dev_3.6.9-1~18.04ubuntu1.12+tuxcare.els26_amd64.deb
sha:5dc3407635cb6658c1a2fba1b7678efe4b1bde11
-
libpython3.6-minimal_3.6.9-1~18.04ubuntu1.12+tuxcare.els26_amd64.deb
sha:c62776fa298b022cc455eaa091166c905c5324e8
-
libpython3.6-stdlib_3.6.9-1~18.04ubuntu1.12+tuxcare.els26_amd64.deb
sha:b94c0ef6e82955897b153bad08a7673098639a03
-
libpython3.6-testsuite_3.6.9-1~18.04ubuntu1.12+tuxcare.els26_all.deb
sha:07ad8c14de32883911e891fc24dd7253b8e0b2f5
-
python3.6_3.6.9-1~18.04ubuntu1.12+tuxcare.els26_amd64.deb
sha:983c3d7f5cc436820b04db523f71426b0837bd3d
-
python3.6-dev_3.6.9-1~18.04ubuntu1.12+tuxcare.els26_amd64.deb
sha:a2c6002d12095ec0fcbdd9e59784a57fcd879302
-
python3.6-doc_3.6.9-1~18.04ubuntu1.12+tuxcare.els26_all.deb
sha:a1f3386627b94190f81874c630a28d0ed33bdd1f
-
python3.6-examples_3.6.9-1~18.04ubuntu1.12+tuxcare.els26_all.deb
sha:1dcc083865fdcb828c7092e0e9c6c3023c96f17e
-
python3.6-minimal_3.6.9-1~18.04ubuntu1.12+tuxcare.els26_amd64.deb
sha:fc71cf8dc9608d9d9099b18639fb1484035fb4c9
-
python3.6-venv_3.6.9-1~18.04ubuntu1.12+tuxcare.els26_amd64.deb
sha:af42b8c20b3b30effdb50f063461b5097285fb23
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
