[CLSA-2026:1789719542] python3: Fix of CVE-2026-82049
Type:
security
Severity:
Important
Release date:
2026-09-18 08:19:14 UTC
Description:
- CVE-2026-82049: resolve a hard link's target with os.path.realpath() in makelink_with_filter() so extracting a hard link to a symlink cannot recreate that symlink at a shallower path and reach files outside the destination directory
CVEs fixed:
Updated packages:
  • platform-python-3.6.8-62.el8.tuxcare.els18.i686.rpm
    sha:dfa2dfba591b444583c24b81212eabcb2001f7d2409c8ec582a18609fdf9d0b4
  • platform-python-3.6.8-62.el8.tuxcare.els18.x86_64.rpm
    sha:20cab9098ca965678c25d6d4f9ec8fba8f1d566dca24f5250cc2c2d66828afd5
  • platform-python-debug-3.6.8-62.el8.tuxcare.els18.i686.rpm
    sha:ff8b883d587bc6b6356cc9fd2d806cf9d3e048808903eb8934a81ca5b0ae7955
  • platform-python-debug-3.6.8-62.el8.tuxcare.els18.x86_64.rpm
    sha:1c8e3ebf903d733058ab3c31e4e0b0d555c3155fb8ca09febc781abb468b72b0
  • platform-python-devel-3.6.8-62.el8.tuxcare.els18.i686.rpm
    sha:0704ea9de74786a9ea1379cf0a8ef71eebf9cede6b9adbb7dea5b0984f359967
  • platform-python-devel-3.6.8-62.el8.tuxcare.els18.x86_64.rpm
    sha:65c71e0f84fe39a1dc2301eea28ee00d09778f05b4e31a29258c29cf3ae08387
  • python3-devel-3.6.8-62.el8.tuxcare.els18.x86_64.rpm
    sha:414b51e2d8f6a0f2387376db40877b78312d2501546e23c6f0a0d527faa7dd76
  • python3-idle-3.6.8-62.el8.tuxcare.els18.i686.rpm
    sha:cacadcace00fa33c72cd2fce6c365f8e85c9db34543f0107c15ed74a37d5b596
  • python3-idle-3.6.8-62.el8.tuxcare.els18.x86_64.rpm
    sha:012ce4984f6cede46a9f6ccde01cec3a045ae8d8c5e96004acc03ba3504f56e0
  • python3-libs-3.6.8-62.el8.tuxcare.els18.i686.rpm
    sha:afc62206af8214c91ad5cfb7dca7f96c208e737aa2af04e0363c034c3d9705fb
  • python3-libs-3.6.8-62.el8.tuxcare.els18.x86_64.rpm
    sha:92b5540f6ce2bdd53894f5bad072a5a33904754497eaf2f38bf44de965a3b886
  • python3-test-3.6.8-62.el8.tuxcare.els18.i686.rpm
    sha:cbc070951737e44d67778487f2f48329d7067c864addd02405039ab84b8baad7
  • python3-test-3.6.8-62.el8.tuxcare.els18.x86_64.rpm
    sha:abf9d13a46bdf1b2b333021711c8b2154ca742c0240d001fcbcbcbec2877c033
  • python3-tkinter-3.6.8-62.el8.tuxcare.els18.i686.rpm
    sha:df5846c0cb5e32f8d5a0617b6a3831c82b690f6568b0a1cfe801518e12e71238
  • python3-tkinter-3.6.8-62.el8.tuxcare.els18.x86_64.rpm
    sha:efd0861ab5446e0e1c13936952917f17ccac2b031861b94c97451b6af8f8ef2e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.