Release date:
2026-10-20 07:57:11 UTC
Description:
* SECURITY UPDATE: Directory traversal in tarfile extraction
- debian/patches/CVE-2007-4559.patch: make the PEP 706 extraction filters
available for tarfile and shutil.unpack_archive, including the 'data'
filter that rejects members escaping the destination directory. The
filters are opt-in and the default extraction behaviour is unchanged
(still 'fully_trusted', i.e. no filtering), matching upstream Python
3.9. Callers must opt in explicitly, via
tar.extractall(path, filter='data') per call,
TarFile.extraction_filter = tarfile.data_filter process-wide, or
shutil.unpack_archive(..., filter='data'); include the upstream
gh-135034 through gh-157265 rollups so the opt-in filters normalize
link targets, re-filter link fallbacks and directory fixups, skip
rejected members when errorlevel is zero, and resolve hardlink targets.
- CVE-2007-4559
- CVE-2024-12718
- CVE-2025-4138
- CVE-2025-4330
- CVE-2025-4435
- CVE-2025-4517
- CVE-2026-4360
- CVE-2026-7774
- CVE-2026-11940
- CVE-2026-19672
- CVE-2026-82049
- CVE-2026-87910
Updated packages:
-
idle-python3.9_3.9.2-1+deb11u7+tuxcare.els4_all.deb
sha:c9eb1a260708b56366cdcbf189684d9856f0db5c
-
libpython3.9_3.9.2-1+deb11u7+tuxcare.els4_amd64.deb
sha:3e129761f4c6ebe58c909bf6948ae7269c0a94d9
-
libpython3.9-dev_3.9.2-1+deb11u7+tuxcare.els4_amd64.deb
sha:74f5111d46fec80b11e1c5fcda14f15c642fba4f
-
libpython3.9-minimal_3.9.2-1+deb11u7+tuxcare.els4_amd64.deb
sha:6e0f7165e4746edb8e7f60cca2b832a1653c89d4
-
libpython3.9-stdlib_3.9.2-1+deb11u7+tuxcare.els4_amd64.deb
sha:24ac50bac9dbc9092a35463a0bac6b22bc9a9da3
-
libpython3.9-testsuite_3.9.2-1+deb11u7+tuxcare.els4_all.deb
sha:96602c07b8b21eeafe413dce31f4f70b69e217de
-
python3.9_3.9.2-1+deb11u7+tuxcare.els4_amd64.deb
sha:656e2c938bed92602c61a488209ce03b3adebbdc
-
python3.9-dev_3.9.2-1+deb11u7+tuxcare.els4_amd64.deb
sha:d8e983141fd117f3b294ddb15002201f672fed71
-
python3.9-doc_3.9.2-1+deb11u7+tuxcare.els4_all.deb
sha:7f1d6f4f1c9c2b8c63f33864124c057327859c59
-
python3.9-examples_3.9.2-1+deb11u7+tuxcare.els4_all.deb
sha:bf1b6183dbca58dfd200161142440fa6378a2d74
-
python3.9-full_3.9.2-1+deb11u7+tuxcare.els4_amd64.deb
sha:494912559aece6e8458ee3ca5a61b5f924d0bbf4
-
python3.9-minimal_3.9.2-1+deb11u7+tuxcare.els4_amd64.deb
sha:35df0d9aba44de6f3e594459eef8d10d33d92eab
-
python3.9-venv_3.9.2-1+deb11u7+tuxcare.els4_amd64.deb
sha:8c246c40b0e559f6662a4ba25ff614eeef15dfed
-
libpython3.9_3.9.2-1+deb11u7+tuxcare.els4_arm64.deb
sha:79e443cb8ac223882e6b90757e924b24e94e80c5
-
libpython3.9-dev_3.9.2-1+deb11u7+tuxcare.els4_arm64.deb
sha:a3f0c8ee889f6bfa2e505a41b781a56fe89ce233
-
libpython3.9-minimal_3.9.2-1+deb11u7+tuxcare.els4_arm64.deb
sha:42b0f8a0d4878ff80a35263ca28cd449cadb74e7
-
libpython3.9-stdlib_3.9.2-1+deb11u7+tuxcare.els4_arm64.deb
sha:12a874ac604feedac3f02f06bfe37e675387d2f8
-
python3.9_3.9.2-1+deb11u7+tuxcare.els4_arm64.deb
sha:8d03ce10994e5be93df6e1fd8733835e3e3288ea
-
python3.9-dev_3.9.2-1+deb11u7+tuxcare.els4_arm64.deb
sha:cf20fb8b9c07bf77647a7e84518a109c79723e25
-
python3.9-full_3.9.2-1+deb11u7+tuxcare.els4_arm64.deb
sha:a0105fed4627492b0365b7d860a75e429c096ee4
-
python3.9-minimal_3.9.2-1+deb11u7+tuxcare.els4_arm64.deb
sha:0c787a23393fdd7294de224761b98f4a5b5095bd
-
python3.9-venv_3.9.2-1+deb11u7+tuxcare.els4_arm64.deb
sha:97d98ce4401edef319403795570a61c0fbeb183f
-
libpython3.9_3.9.2-1+deb11u7+tuxcare.els4_armel.deb
sha:3b34bafe4c0c7368efb7bfd3700652994cae2f41
-
libpython3.9-dev_3.9.2-1+deb11u7+tuxcare.els4_armel.deb
sha:b5d33313ab824476be8eaf68a1ab5edc768f41ba
-
libpython3.9-minimal_3.9.2-1+deb11u7+tuxcare.els4_armel.deb
sha:a5c9776c16a5d0cccef6cc6611c3b133a94cc6e9
-
libpython3.9-stdlib_3.9.2-1+deb11u7+tuxcare.els4_armel.deb
sha:01ac2c02b9efb48714a9da2fb0c5e40002c7b31f
-
python3.9_3.9.2-1+deb11u7+tuxcare.els4_armel.deb
sha:344d7fe8e606337fde22f4fb9803bace91db844f
-
python3.9-dev_3.9.2-1+deb11u7+tuxcare.els4_armel.deb
sha:21cd1189332b94d984970a41581ec6fb167f52bf
-
python3.9-full_3.9.2-1+deb11u7+tuxcare.els4_armel.deb
sha:d473ad1b03da25ae4ac8efc9b8e2342a67dd7a74
-
python3.9-minimal_3.9.2-1+deb11u7+tuxcare.els4_armel.deb
sha:87609d60d708ba70f86b7b0081d7d6599f37bc62
-
python3.9-venv_3.9.2-1+deb11u7+tuxcare.els4_armel.deb
sha:8a3ced17c31e2bf2ae19badf1a00affd14475cd8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
