[CLSA-2026:1787681542] python3.9: Fix of CVE-2026-0864
Type:
security
Severity:
Important
Release date:
2026-08-25 18:12:32 UTC
Description:
- CVE-2026-0864: normalize CR and CRLF line endings to LF before the newline-to-continuation escape in configparser._write_section(), so an attacker-controlled value containing a bare CR can no longer inject extra keys when the written file is re-read (upstream gh-143927, 3.10-branch commit 12dcbd74d3)
CVEs fixed:
Updated packages:
  • python-unversioned-command-3.9.21-2.el9_6.2.tuxcare.els18.noarch.rpm
    sha:8d2a99c031b5e60209316979bc10b50526f4555cdcd80c6039615001671ad77c
  • python3-3.9.21-2.el9_6.2.tuxcare.els18.i686.rpm
    sha:bee8dce54c296d961951f3b9b75d10bc1a69898d0d37187f5d51993d12c19a2b
  • python3-3.9.21-2.el9_6.2.tuxcare.els18.x86_64.rpm
    sha:4b0671f7e6419e6f8d35a2842858a73b81ce63d0db606862a4c729c10df2f9dd
  • python3-debug-3.9.21-2.el9_6.2.tuxcare.els18.i686.rpm
    sha:52f5a150cc13af15a2b512ff5ad7d1e43274aa158be262a58c097514b17f074d
  • python3-debug-3.9.21-2.el9_6.2.tuxcare.els18.x86_64.rpm
    sha:e346c5eef715da6a025b70f7c98e124e82cd568dee817995132dd1bd99294fd8
  • python3-devel-3.9.21-2.el9_6.2.tuxcare.els18.i686.rpm
    sha:8001d08431a42a222124639a8eee1119b88e862b5df4c2d5433d1a8eadecd05a
  • python3-devel-3.9.21-2.el9_6.2.tuxcare.els18.x86_64.rpm
    sha:80efdd53b835031ce6cc602ad9c66068ac6dd877e4552916d530d8a7443ed288
  • python3-idle-3.9.21-2.el9_6.2.tuxcare.els18.i686.rpm
    sha:3918ebd356fe29bf0381fd0c1dae7e2c398f237b74c236ecf69a43109e7e4e98
  • python3-idle-3.9.21-2.el9_6.2.tuxcare.els18.x86_64.rpm
    sha:e06d2796f45fa8ac5a3935645f4114d67e5f65f9bc504aa2e040476e5deca49d
  • python3-libs-3.9.21-2.el9_6.2.tuxcare.els18.i686.rpm
    sha:e1650ea661d768477f9d24502e9328852ccc627b31c1019e523f9c03abfb9fbb
  • python3-libs-3.9.21-2.el9_6.2.tuxcare.els18.x86_64.rpm
    sha:4020a3d73a9ac5be52eac244845d2c7d8c4384ae6a2dd9effc1baa53dd6d28ae
  • python3-test-3.9.21-2.el9_6.2.tuxcare.els18.i686.rpm
    sha:4d5a6121ac238b05c047e8ea6bc9e887ec98cbcfc62f7439c5bc95a59f9dca33
  • python3-test-3.9.21-2.el9_6.2.tuxcare.els18.x86_64.rpm
    sha:804f9cf9892b55fad7b7483e21d2937ed7ae9f5b86c4a686a1e9a409ffa48929
  • python3-tkinter-3.9.21-2.el9_6.2.tuxcare.els18.i686.rpm
    sha:bc32791cdae128c52ecda895a292fab2db3f42bf7968f3814c524ca653584234
  • python3-tkinter-3.9.21-2.el9_6.2.tuxcare.els18.x86_64.rpm
    sha:d9caadb6a36dfa8a138c3de7395069233c176438a9b804f83ebabe2d081225eb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.