[CLSA-2026:1792928671] Fix CVE(s): CVE-2026-4786
Type:
security
Severity:
Important
Release date:
2026-10-25 11:44:43 UTC
Description:
* SECURITY UPDATE: command-line option injection in webbrowser.open() through a URL whose "%action" substitution yields a leading dash - debian/patches/CVE-2026-4519.patch: carries the fix, applied since tuxcare.els1: Lib/webbrowser.py UnixBrowser.open() checks the URL after the %action substitution - debian/patches/CVE-2026-4786.patch: add the upstream regression test in Lib/test/test_webbrowser.py - CVE-2026-4786
CVEs fixed:
Updated packages:
  • idle-python2.7_2.7.16-2+deb10u4+tuxcare.els8_all.deb
    sha:fe3188e9ddec9d44055623abfaf66e4921db2c13
  • libpython2.7_2.7.16-2+deb10u4+tuxcare.els8_amd64.deb
    sha:0652e5b86cc30fc866dcecec2cda1b53f285e053
  • libpython2.7-dev_2.7.16-2+deb10u4+tuxcare.els8_amd64.deb
    sha:c579395fd32359654355dd362760dace8423f379
  • libpython2.7-minimal_2.7.16-2+deb10u4+tuxcare.els8_amd64.deb
    sha:42a70535f335b9564d5c3a4c1518eb0098783e20
  • libpython2.7-stdlib_2.7.16-2+deb10u4+tuxcare.els8_amd64.deb
    sha:eacfcddc7e9807c3302aab4f6ac30ec8c5290dad
  • libpython2.7-testsuite_2.7.16-2+deb10u4+tuxcare.els8_all.deb
    sha:8dcfce66a28df8649d2d7e25fb03b4d6cdfba39d
  • python2.7_2.7.16-2+deb10u4+tuxcare.els8_amd64.deb
    sha:402c57560f6c6b5e452177ca6c33125fc51b5cf4
  • python2.7-dev_2.7.16-2+deb10u4+tuxcare.els8_amd64.deb
    sha:f93f9f13b87b68114364bd24c78db619a6c423be
  • python2.7-doc_2.7.16-2+deb10u4+tuxcare.els8_all.deb
    sha:f8b4bfa9db6afc3cca98c9b248466602d0c34d47
  • python2.7-examples_2.7.16-2+deb10u4+tuxcare.els8_all.deb
    sha:50a3da25724532749299ea53a37c77206576b04c
  • python2.7-minimal_2.7.16-2+deb10u4+tuxcare.els8_amd64.deb
    sha:40bcc2e2c1aae6f544e6d84ceb5c0e919a8b4765
  • libpython2.7_2.7.16-2+deb10u4+tuxcare.els8_arm64.deb
    sha:e5978243b6b992311cf76de3ce236a09d086e9d1
  • libpython2.7-dev_2.7.16-2+deb10u4+tuxcare.els8_arm64.deb
    sha:c338717df26e07424ecd57b136eb2865c18d98fe
  • libpython2.7-minimal_2.7.16-2+deb10u4+tuxcare.els8_arm64.deb
    sha:18ac837e564a8f99e8a6581baa33f6da8ef5e07f
  • libpython2.7-stdlib_2.7.16-2+deb10u4+tuxcare.els8_arm64.deb
    sha:5fc4242db4157d795b23488b23b8956981f822df
  • python2.7_2.7.16-2+deb10u4+tuxcare.els8_arm64.deb
    sha:4c8527a3748fa0cca6abc9c11c2054174bd20ba5
  • python2.7-dev_2.7.16-2+deb10u4+tuxcare.els8_arm64.deb
    sha:263805bae75c0c983f839113ca1081e88fa58d44
  • python2.7-minimal_2.7.16-2+deb10u4+tuxcare.els8_arm64.deb
    sha:abe031f62c4bdde85800a0532b2eadb039fe304c
  • libpython2.7_2.7.16-2+deb10u4+tuxcare.els8_armel.deb
    sha:b329bf7e1937b216816e28335383d24134e6aa90
  • libpython2.7-dev_2.7.16-2+deb10u4+tuxcare.els8_armel.deb
    sha:2d3c02c9b3ee44f51b5bb3753d5b53c228233e62
  • libpython2.7-minimal_2.7.16-2+deb10u4+tuxcare.els8_armel.deb
    sha:48d4ce228647e29eae7b7a7b635290209d884642
  • libpython2.7-stdlib_2.7.16-2+deb10u4+tuxcare.els8_armel.deb
    sha:736fdb793a8ecf3af7c6ba3c92dc992d4a6275cb
  • python2.7_2.7.16-2+deb10u4+tuxcare.els8_armel.deb
    sha:227292f2fc452c026756c8bad0ca14d11d83ecd0
  • python2.7-dev_2.7.16-2+deb10u4+tuxcare.els8_armel.deb
    sha:61d9ddbb405acd3f8fe5d30f64af9d6c9b3e2bd7
  • python2.7-minimal_2.7.16-2+deb10u4+tuxcare.els8_armel.deb
    sha:90c6aa22fee205bda86c2b2d3242ea23918bc71d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.