[CLSA-2026:1789568248] python3: Fix of CVE-2026-11972
Type:
security
Severity:
Important
Release date:
2026-09-16 14:17:38 UTC
Description:
- CVE-2026-6100: clear dangling next_in pointer after MemoryError in bz2/lzma decompress to avoid use-after-free on decompressor reuse - CVE-2026-11972: break tarfile._Stream.seek block-skip loop at EOF to avoid a hang on crafted streaming archives
CVEs fixed:
Updated packages:
  • python3-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:812b3cf3eb120c4076fb2015e4cb8e7493383c676f0f2e53f67d001cbb876edb
  • python3-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:b70bd567ee52717c3f8f615f51964af11910e856a02e018ea6af093945a50bf6
  • python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:daeabcbccc98fc93fe6ee6a777a49842c4f6a8f7e5b395752473a0f54d34993f
  • python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:338ae773859028bb271f540832c47d69569c05317ddf168369e64ee4106e66de
  • python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:9be76663fc6f4a825e977b21a4403176c7eee49b6b1c66641ef527201fcd21ab
  • python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:1cfeb586770c351cadca185dd4b6c3e755c7368bbaf18fce9d2bb4be1b458e67
  • python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:8fbfff7bc05e3659abb8e6f3ff4a0f7ca6a00512def77a4a0254385b18660893
  • python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:b0ebb54188901c8fbeb0d9b4fb207bf0164518670ad982487fa64b9caafcf2a6
  • python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:931ba3d329ccff209d3e4bb7055e73deb6b91ba7b7b320bf39c7b7ace7ffb5e0
  • python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:297719bb5716eee14634bd8565a3ffa5ede55a3127346cf3c15d9b7f68abd228
  • python3-test-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:beb16d58b04388efb4529e78039241c7e74ba663971224e3de0edf270f753079
  • python3-test-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:ecf5c01aeb50238049f509487c66b4b7b379b11c543e02b7eca6e2b2702bf76b
  • python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:09d624e99172f80c9cca3cd7ba545b4f264d68f7b27ef4af63ddf98bea25fa9f
  • python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:8d01f6b5a55f046043a2a25ae685bbf602c26c6a54c72ec83fb3ca026fa93b10
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.