[CLSA-2026:1789601434] python3: Fix of CVE-2026-11972
Type:
security
Severity:
Important
Release date:
2026-09-16 23:30:45 UTC
Description:
- CVE-2026-6100: clear dangling next_in pointer after MemoryError in bz2/lzma decompress to avoid use-after-free on decompressor reuse - CVE-2026-11972: break tarfile._Stream.seek block-skip loop at EOF to avoid a hang on crafted streaming archives
CVEs fixed:
Updated packages:
  • python3-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:77fa2eaa28c99bb09da4347c9b7a2d1ea442316ecdc26f5dddba184bdd1f60ba
  • python3-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:57ed40c20583f105586350709145903dc091d18212c5bf504c601322f1558691
  • python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:f6025f79abf27b3c74e9cc5d8fd2f6111090dfd6704270c6d0fabb5ae64f367b
  • python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:54e8d8858d243a4b8a89131ad91918ca321ce4b68dcc5f227c5c42a6be530b29
  • python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:476d2683a33d54af88f276af0e83670ad7efdd972c50b3ef90faf8bafb2ad3ad
  • python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:71b5d465919ccc92320cbfc4e42dde8545e021998300c725ab2eaebf03c321b4
  • python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:bf15595430b860eed07b4dc9072f8f4345b5afa06c956a7e6eb76703d4cb1047
  • python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:79943a64a052f3522a28aac08b8f531b7315750a39d9e8749c2e850894de766c
  • python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:6d2344de9ca6b594c253bba000d6bc99621a21fed436f52029bb34579b75165b
  • python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:22a2cf6c9e4eac30a387fe065992282fefa147a70d5a7b287012ea5209986028
  • python3-test-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:cbfc83388820bfe35a6d86ccd9173a134bed4ed7bc89f11255fe156af06c7d77
  • python3-test-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:225c1b8ee126cd1f08098b865b19a82e02399cb6c1f491550e858bf10265a4ef
  • python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:dbd2f345be2f841c718c2a81efe3bdfb64f47fb159826312078c868a636f7b0c
  • python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:7f01e6b9263a51165bc39f0ac53576d1cf12bea7818a8595e3cc9464500f4f2e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.