Release date:
2026-10-20 07:34:59 UTC
Description:
- CVE-2026-11940: pass filter_function through TarFile.extract() so the hardlink-extraction fallback is filtered (prerequisite)
- CVE-2026-11940: filter the symlink at the hardlink's own path so a hardlink to a deeper symlink cannot recreate it at a shallower path and escape the destination directory
- CVE-2026-82049: resolve a hardlink's target with os.path.realpath() so extracting a hard link to a symlink cannot relocate that symlink and expose or modify files outside the destination
Updated packages:
-
python3-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:a15620c542b29913db5c716f1c3ee313b41aa24c5f96647b6a207f2899fb20bb
-
python3-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:6b8fa57b4732a38e852c67c781524179d9d25ef34249689dfee2ad97f96030b8
-
python3-debug-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:2c4a0fe62fe5bc143ca4fc4b8315b8dadcdf00ac55717b771b64e90f861ffe26
-
python3-debug-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:99db3d300c0e468bfb06b01105bd8d3d2760e91431d177a011309fdfa62ce4da
-
python3-devel-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:4964328e942bb2cb1fb90b9c9c2adef63f1266effbb0b3b2c424e0ff16525940
-
python3-devel-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:401da1ec526778e7dd947fb6bb5b6a18799443cb02544791f2e288bc012ee03b
-
python3-idle-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:8fff33fd57a989033f6c7d7090db720d004cce9f07ba6934e1765d7f55e25704
-
python3-idle-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:18868315110ce6b631348b5baeb2386baab856c82b983004155e4c111bcef7d1
-
python3-libs-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:0d21e8ad992290d65ab73fbb831f049e4ed194b34dff8e5099bb1d5bd71089bd
-
python3-libs-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:90ddc3d4dc2d4b1ef17ed8957abe61f9428e93b92daa439716a54a799b1f172b
-
python3-test-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:bfc4000e81294301df6c6ba834c2ce651368c4cb22b12ddb4d96122023507eab
-
python3-test-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:281110c31c033aa5f6c3dce29fb053c46b80236fc525123187882362253e6b7c
-
python3-tkinter-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:f53f6156bc1acb06848b110c025418466fca8243472ffb2416c5f43515e5b63c
-
python3-tkinter-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:8a90375bd8ce19b9faef5a4c1caaf7669084eb084982cf604ca9b855a2c49ae7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
