[CLSA-2026:1777478952] Fix CVE(s): CVE-2026-6100

Type:

security

Severity:

Critical

Release date:

2026-04-30 22:50:24 UTC

Description:

   * SECURITY UPDATE: use-after-free in
     BZ2Decompressor when MemoryError is raised in the C-level
     decompress() helper
     - debian/patches/CVE-2026-6100.patch: defensively null
       bzs->next_in on the error: path of BZ2Decomp_decompress in
       Modules/bz2module.c.
     - CVE-2026-6100

Updated packages:

alt-python27_2.7.18-16_amd64.deb
sha:99b2589cb57c2f3f92b39c0452a1cb6988cddfd5
alt-python27-debug_2.7.18-16_amd64.deb
sha:71e22b81cc6c009ce88b970856dac63d45331731
alt-python27-devel_2.7.18-16_amd64.deb
sha:744ec89d79b8aef1a52df0ae603dd8df41a90e86
alt-python27-idle_2.7.18-16_amd64.deb
sha:1dc13c5cfd4a4ce8f776552d2f9b3f35306c306b
alt-python27-libs_2.7.18-16_amd64.deb
sha:c68b6d7f7bfd2f4f689c73ced52884377930914b
alt-python27-test_2.7.18-16_amd64.deb
sha:4257ea43577fa644b90c25d423f28d9d147178b0
alt-python27-tkinter_2.7.18-16_amd64.deb
sha:1aece5b874ffb4f929f6e735b436054e067215b7
alt-python27-tools_2.7.18-16_amd64.deb
sha:951617f2d3762ad62396d2716db047e84d0b207e

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.