[CLSA-2026:1787680122] python3.9: Fix of CVE-2026-0864
Type:
security
Severity:
Important
Release date:
2026-08-25 17:48:52 UTC
Description:
- CVE-2026-0864: normalize CR and CRLF line endings to LF before the newline-to-continuation escape in configparser._write_section(), so an attacker-controlled value containing a bare CR can no longer inject extra keys when the written file is re-read (upstream gh-143927, 3.10-branch commit 12dcbd74d3)
CVEs fixed:
Updated packages:
  • python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els33.noarch.rpm
    sha:873aa179b630b54e4408a914e213f39eef4b0ca305e68eac5da7f2fed3465d90
  • python3-3.9.16-1.el9_2.2.tuxcare.els33.i686.rpm
    sha:9be03cbe784386f15a6636dfb1e3f8abf2629730ef07128bcc9de2dec1e48901
  • python3-3.9.16-1.el9_2.2.tuxcare.els33.x86_64.rpm
    sha:ef7c205f21330edcdbcd12426f7d39b2daac0df83ecfd2ab2baf787df2dd2b8e
  • python3-debug-3.9.16-1.el9_2.2.tuxcare.els33.i686.rpm
    sha:a015cab90135bccd37327f87bf69ede8d13a907972db308aa545746fb57d0839
  • python3-debug-3.9.16-1.el9_2.2.tuxcare.els33.x86_64.rpm
    sha:4a22ae519e306f30cd1dea012420c2cdbfe46b2a56ef26f1fc0bcbcec5e6f678
  • python3-devel-3.9.16-1.el9_2.2.tuxcare.els33.i686.rpm
    sha:9f3dbeae57a2463a7171ede406fcacd064a95fb7fd76a323d585e8af2f3f6142
  • python3-devel-3.9.16-1.el9_2.2.tuxcare.els33.x86_64.rpm
    sha:eb9a3211fd173b2a3346883508ff4238a8fa1932a09167005078ea11e518f604
  • python3-idle-3.9.16-1.el9_2.2.tuxcare.els33.i686.rpm
    sha:aac81aa68601f3921081e99cd39ce09b535835a1391372e48d3728e6fbca240d
  • python3-idle-3.9.16-1.el9_2.2.tuxcare.els33.x86_64.rpm
    sha:cd563cc00462338e05efe1af379c19f6e2b060c0ac62f57203c1d46d9f463b6e
  • python3-libs-3.9.16-1.el9_2.2.tuxcare.els33.i686.rpm
    sha:0a78dfa4b40b61710d53393a267881c793d4ac79c612f024339f53bbfcee68e2
  • python3-libs-3.9.16-1.el9_2.2.tuxcare.els33.x86_64.rpm
    sha:957d2d893d10a623e8949dbddb0e41fb50aae33ce9d55fedc8ce71112e4e6e17
  • python3-test-3.9.16-1.el9_2.2.tuxcare.els33.i686.rpm
    sha:cebe96752a0a7bdec149962adb07331fe29229ac753ffe55ef4f9ebf79721322
  • python3-test-3.9.16-1.el9_2.2.tuxcare.els33.x86_64.rpm
    sha:516db1165be49fe06fb9ef0865ee48fa08443d066d825d6b2bc18b3fdd60b26c
  • python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els33.i686.rpm
    sha:bb4c4c9e6feee87f75e73d9557f6639eedee40b606cb469c028a886833a953ac
  • python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els33.x86_64.rpm
    sha:984f1be184da4213ebc5f02f67f6f1ce8cca89033a0f9bbda65957c79aad77ec
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.