[CLSA-2026:1787043977] python3.11: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-08-20 13:32:21 UTC
Description:
- CVE-2026-11940: tarfile: validate the link target at the path it is actually extracted to, so a hardlink referencing a deeper symlink can no longer create a symlink outside the destination directory (bypass of CVE-2025-4330)
CVEs fixed:
Updated packages:
  • python3.11-3.11.11-2.el9_6.2.tuxcare.els15.i686.rpm
    sha:58dd5679735c7b382774218b9b68b68ce91eae4f469355868b4f2e20bddb6810
  • python3.11-3.11.11-2.el9_6.2.tuxcare.els15.x86_64.rpm
    sha:c4bccef85914308db2be7d0462318ad9125b617dc73fa3de11643f7cba38e07f
  • python3.11-debug-3.11.11-2.el9_6.2.tuxcare.els15.i686.rpm
    sha:4128406c265bfec2d9a89e2bc3b3506ce108c1a9b2dd03b7d08d50213f2baa83
  • python3.11-debug-3.11.11-2.el9_6.2.tuxcare.els15.x86_64.rpm
    sha:c82f2ad18eb3ca247d9167e189414f007df68b685551e76176a3a632e897ca2f
  • python3.11-devel-3.11.11-2.el9_6.2.tuxcare.els15.i686.rpm
    sha:eee940a566cd065e226bebc5a4ee9c518c587dfaf659e3741a4fb56de32f4f69
  • python3.11-devel-3.11.11-2.el9_6.2.tuxcare.els15.x86_64.rpm
    sha:b8aa4e874fcabad42748a20dbb487f761c3d1ce9237c7f4d95b0bf5023bf1506
  • python3.11-idle-3.11.11-2.el9_6.2.tuxcare.els15.i686.rpm
    sha:d43fd00cba706acc3b6975a535da0e87b0fed6383c470dd5973173c94017eb8c
  • python3.11-idle-3.11.11-2.el9_6.2.tuxcare.els15.x86_64.rpm
    sha:2b06c7c2036385c10ab566c16b26963f73a07f6170acef5d5894b24e98d78d0c
  • python3.11-libs-3.11.11-2.el9_6.2.tuxcare.els15.i686.rpm
    sha:6334b056f4f5d7ad7e5ec7025d107821a5e7910f45390199dcd9f363d7ad04dd
  • python3.11-libs-3.11.11-2.el9_6.2.tuxcare.els15.x86_64.rpm
    sha:c04f9a7da26c8e18326419e1b2180f698afedcdf6e94d73213455f4f38fdac37
  • python3.11-test-3.11.11-2.el9_6.2.tuxcare.els15.i686.rpm
    sha:2126ece7d1a5403c31da37db0a2e8029ce962c0b881b3d4a9d66d4f1984ce3f2
  • python3.11-test-3.11.11-2.el9_6.2.tuxcare.els15.x86_64.rpm
    sha:e12b999b082e3960bde3c9dc80356d1addd9f1136e42f139ebe3a0f6d65744c6
  • python3.11-tkinter-3.11.11-2.el9_6.2.tuxcare.els15.i686.rpm
    sha:633897331d7797b0f17d412712e31a8aafab20501afe70e49109b84486b272c5
  • python3.11-tkinter-3.11.11-2.el9_6.2.tuxcare.els15.x86_64.rpm
    sha:6b920c890faa2ae02f7e7be000fc2ae6b40c1160305475be16a7d0c0329ba594
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.