Release date:
2026-10-17 14:55:57 UTC
Description:
- CVE-2026-11940: pass filter_function through TarFile.extract() so the hardlink-extraction fallback is filtered (prerequisite)
- CVE-2026-11940: filter the symlink at the hardlink's own path so a hardlink to a deeper symlink cannot recreate it at a shallower path and escape the destination directory
- CVE-2026-82049: resolve a hardlink's target with os.path.realpath() so extracting a hard link to a symlink cannot relocate that symlink and expose or modify files outside the destination
Updated packages:
-
python3-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:eabeed1fa78b8ac0d7f17763d3c9189208a9056c190c3b6e2fc2f5bb33749bbd
-
python3-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:9216dac4831132deade9764248e39b301226055854e8cd894d842af4e98e40ea
-
python3-debug-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:dc562c9bba35fbd9314d234215bfa59e986f15b511769a39cc10231b56d40f26
-
python3-debug-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:384235e60878c23d3182a6b4c994dfcaf85da1fceeb066a53c95e9a8b5560e87
-
python3-devel-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:c23f13e3230c2b09df2b207d844ee1caec236a8b51c217bfbfb66a865b235ecb
-
python3-devel-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:12db900b5c664531fd7fd7c2271ce1adbf5ce7c79b8d301bdff8b0e0eed50e9c
-
python3-idle-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:c8c94c820d7f4e23dac7699856ecc001dc5c1b73341ceb61e30c920b40a05d12
-
python3-idle-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:3a9a5c11988deeb05d7026c0e163da3c397405769dc0f4e617c421e4505ad90b
-
python3-libs-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:23a81307dfa1ad63c806d957addd9d1f0a689947b5c7aa03788f4d2385ffa84c
-
python3-libs-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:67a648e7a86c90aec7c0ac5bd2183e95eb1ac0dea3c12bc7442c5366f4bb65a1
-
python3-test-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:532f141fb48a0ee5c4741a0eb2355692b6435429fba2db51b6b53ecdf0069f9b
-
python3-test-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:254a3d91a0974d435567fc171de97189df56cdc8734577bc6277b169d3a8a101
-
python3-tkinter-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:033b5fd32d25c30fb4f35e4b7ccc6ceacdbe211701ce093c6989db8ad407ce4b
-
python3-tkinter-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:0539726983f76521f824df14a3854a2219b26ccb2f297dfc4213b6d572e702a2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
