Release date:
2026-10-19 17:46:20 UTC
Description:
- CVE-2026-11940: pass filter_function through TarFile.extract() so the hardlink-extraction fallback is filtered (prerequisite)
- CVE-2026-11940: filter the symlink at the hardlink's own path so a hardlink to a deeper symlink cannot recreate it at a shallower path and escape the destination directory
- CVE-2026-82049: resolve a hardlink's target with os.path.realpath() so extracting a hard link to a symlink cannot relocate that symlink and expose or modify files outside the destination
Updated packages:
-
python3-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:4d47ef5d53fcce1fa4a939138aafe47757e5430cb69e97e62b90741fb58487c3
-
python3-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:eb518c7ff0d7909d9897b952e8d34d63e402691961ea0582f3618623d73ace66
-
python3-debug-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:643c703f95bf82aea61eef6cda2b18557670ac2363ab92564b47ea8ba3834372
-
python3-debug-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:d8180df93192315eda5b22d3d0383deb8415eb233aad70d89500de3ef694a0d5
-
python3-devel-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:b6981f13e82e5127c0b496e09cc7ad26292712d8e892cb17a8df3514bd7e011e
-
python3-devel-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:f99fc6b52554083bb1c84b434c11219f39fba733a185f725905a7b0d9c114b4c
-
python3-idle-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:535df756edbad006c9c77d2109d33ca8478ccb5c1ba1d277bcfb2d5c00cda694
-
python3-idle-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:51ace9b27918f1bd78c6074d5f82cf26c54d7096bd56150610951e7b523f8fa0
-
python3-libs-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:b48654b4f0d5ce04277fdc27d6ca19045d31b2dc7dbe9fc4a63a55b1c86b1b61
-
python3-libs-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:54dc1083ff7b33483013f539b28cde8529cc5b88915814e0a1536b4e701eecdc
-
python3-test-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:818796932ea0b7d1a7981fa89df27a36c4532e856221585ec8b05fbe181ee139
-
python3-test-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:edaa674be07ac2912afeaa1583a5427c59da98696271d48752a2fb8c8823593d
-
python3-tkinter-3.6.8-21.0.13.el7_9.tuxcare.els4.i686.rpm
sha:e536dcb382cbd1e787629e64af822d0a8e2851a62e242cb7c703d1688d67f56f
-
python3-tkinter-3.6.8-21.0.13.el7_9.tuxcare.els4.x86_64.rpm
sha:6732d78b2e7942d975e6043304f3d49b7d855c04e45acffdc46ff3defe9245fb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
