[CLSA-2026:1787311430] python3.9: Fix of CVE-2026-11940
Type:
security
Severity:
Important
Release date:
2026-08-21 11:24:01 UTC
Description:
- CVE-2026-11940: validate hardlink fallback symlinks at their actual extraction path to prevent escaping the destination directory
CVEs fixed:
Updated packages:
  • python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els32.noarch.rpm
    sha:f3f61f69f56314f3aeedda75739a7137eb2177d020242d050544ae8f201ba68f
  • python3-3.9.16-1.el9_2.2.tuxcare.els32.i686.rpm
    sha:6ba170a539ddbefc51d2ea6b9d5e4e451813504ad7d5176506e5667d8aa24636
  • python3-3.9.16-1.el9_2.2.tuxcare.els32.x86_64.rpm
    sha:21f4af84888c0804137847f2fbb4089a3fe9373a20fd467184098ae164903b39
  • python3-debug-3.9.16-1.el9_2.2.tuxcare.els32.i686.rpm
    sha:c95eb2bac6a9ba4d5697a58d210028c149e1e6e5ef2fbf81a7e6c1f83b6ef3f9
  • python3-debug-3.9.16-1.el9_2.2.tuxcare.els32.x86_64.rpm
    sha:c9901bd0e11f83dc50f5c898424f9563e3673be7b30937644b3aefc6ee5237fd
  • python3-devel-3.9.16-1.el9_2.2.tuxcare.els32.i686.rpm
    sha:589ba8a85b0bb4322aa8d944dc7daa3d64170ae3b301bd8e15dd49ae77057e99
  • python3-devel-3.9.16-1.el9_2.2.tuxcare.els32.x86_64.rpm
    sha:fe70eefe2cd707055b9945764ecc525701e50bad195c89d0f550e9fea0bf7a6a
  • python3-idle-3.9.16-1.el9_2.2.tuxcare.els32.i686.rpm
    sha:6e17983509dcb62ed423a55bc0e97af79bc8e847c70d97f60c1287c1e09b545f
  • python3-idle-3.9.16-1.el9_2.2.tuxcare.els32.x86_64.rpm
    sha:da80130444a16c684f2bdc0a42d9dfdcbd6a8413b368b6cb3dec78428e94904b
  • python3-libs-3.9.16-1.el9_2.2.tuxcare.els32.i686.rpm
    sha:d8d33e912512361386ba307233ca906316af13555df3410dca88b4711aa234ae
  • python3-libs-3.9.16-1.el9_2.2.tuxcare.els32.x86_64.rpm
    sha:f8109e141d80e0ddcca6b7a8018b0849a2d0ae4b2b3843a88f1625b5e54da352
  • python3-test-3.9.16-1.el9_2.2.tuxcare.els32.i686.rpm
    sha:2c9294cb3d551d13c83d164f378fee087bc40209d3b313d4fd77cee3dbbb1778
  • python3-test-3.9.16-1.el9_2.2.tuxcare.els32.x86_64.rpm
    sha:12be7f062acc9e1f07130595b2011b5412c2f68cc335e400163a59c22aebf3ee
  • python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els32.i686.rpm
    sha:7673c782993a6bc914e154e9869943bba5f3d90cc065ab259911e9f535b57d31
  • python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els32.x86_64.rpm
    sha:86c90a559f4135a7e3178d7206037a2a330a59f4d9bebc0f9b7f0469e5a2183a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.