Release date:
2026-09-18 16:22:32 UTC
Description:
* SECURITY UPDATE: out-of-bounds write via bz2 stream reuse after a
decompression error (CVE-2026-9669)
- debian/patches/CVE-2026-9669.patch: record the libbz2 error code on the
BZ2Decompressor and BZ2File objects in Modules/bz2module.c and refuse
every later decompress() or read() call, so BZ2_bzDecompress() is never
re-entered on a stream libbz2 has already reported an error for; adds
regression tests for both paths to Lib/test/test_bz2.py
- CVE-2026-9669
Updated packages:
-
idle-python2.7_2.7.17-1~18.04ubuntu1.11+tuxcare.els18_all.deb
sha:e7a019a8796d523c9454f7f74e8a4a43e883c952
-
libpython2.7_2.7.17-1~18.04ubuntu1.11+tuxcare.els18_amd64.deb
sha:93e10faeed1de146ca120c0a20c26ee46fb8564e
-
libpython2.7-dev_2.7.17-1~18.04ubuntu1.11+tuxcare.els18_amd64.deb
sha:f6683cf612b67d4f995f0a3954701e63b2a6ae67
-
libpython2.7-minimal_2.7.17-1~18.04ubuntu1.11+tuxcare.els18_amd64.deb
sha:9294c7214f48e702e29c4cb19954abccd912ff24
-
libpython2.7-stdlib_2.7.17-1~18.04ubuntu1.11+tuxcare.els18_amd64.deb
sha:23ab94770de2e32204eb6a1061619516c43fb5b5
-
libpython2.7-testsuite_2.7.17-1~18.04ubuntu1.11+tuxcare.els18_all.deb
sha:34c8f551d176c251cf748aa2924ff33b852f0f29
-
python2.7_2.7.17-1~18.04ubuntu1.11+tuxcare.els18_amd64.deb
sha:98f8d9b6a08c6e6c18a2cd4c3897f72e5ffbad4c
-
python2.7-dev_2.7.17-1~18.04ubuntu1.11+tuxcare.els18_amd64.deb
sha:4078e2f3a0141ece178023e6e3fb977454f9452c
-
python2.7-doc_2.7.17-1~18.04ubuntu1.11+tuxcare.els18_all.deb
sha:f847febf3254717091fa78dad9db45ed817e4ab0
-
python2.7-examples_2.7.17-1~18.04ubuntu1.11+tuxcare.els18_all.deb
sha:b1c26534f628578837bc0f76baccd1c39d4c5e76
-
python2.7-minimal_2.7.17-1~18.04ubuntu1.11+tuxcare.els18_amd64.deb
sha:ab3848fdd3c5e21dd6d2e7254a22e11f87d1c387
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
