[CLSA-2026:1789995979] python3: Fix of 4 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-21 13:06:33 UTC
Description:
- CVE-2026-87910: tarfile: skip a link member when the extraction filter returns None for its hardlink-extraction fallback instead of ignoring the filter result - CVE-2026-17084: stringprep: build the RFC 3454 B.2/B.3 tables from Unicode 3.2.0 data so IDNA 2003 encoding of newly case-folding characters no longer depends on the interpreter's Unicode version - CVE-2026-15310: zipfile: bound the output of each bzip2/LZMA decompress() call so a small crafted member cannot trigger an unbounded allocation - CVE-2026-9669: bz2: refuse to reuse a BZ2Decompressor after a decompression error, so retrying with the same object can no longer resume from an invalid internal state and write out of bounds
Updated packages:
  • platform-python-3.6.8-62.el8.tuxcare.els19.i686.rpm
    sha:090b2e95e386453412a2b3e1a3993937935b7f8a1d60b6d7a88039fd96831544
  • platform-python-3.6.8-62.el8.tuxcare.els19.x86_64.rpm
    sha:80a996321286e7ef928a197508ec305950bce9fff06b67d550eda4cf346d2e34
  • platform-python-debug-3.6.8-62.el8.tuxcare.els19.i686.rpm
    sha:15829a8b3ccac1989e96e56eb83b41c8a572b6e228c0ef4c6e2ef7802f824ccc
  • platform-python-debug-3.6.8-62.el8.tuxcare.els19.x86_64.rpm
    sha:097b2b6c54ba31e99af2173b5a01510ff8ab8a41191f31fec8628ab7b4b4930b
  • platform-python-devel-3.6.8-62.el8.tuxcare.els19.i686.rpm
    sha:b4d58dc854dd2d06861b71fffb2959f177982e61309db0d6027a73e7167d76dd
  • platform-python-devel-3.6.8-62.el8.tuxcare.els19.x86_64.rpm
    sha:3b9ab3d0cf90e534825391414c5112a367b1e88cc572e4080e592d93cf6d769d
  • python3-devel-3.6.8-62.el8.tuxcare.els19.x86_64.rpm
    sha:3348bb227cd516f3277a97f342011df1fd796952dd7a77c6e55e31d8d84ca5bc
  • python3-idle-3.6.8-62.el8.tuxcare.els19.i686.rpm
    sha:485925aa080943ac8bf50fb922f6473e6cbae2b515579b9c9ab78f8f4c9f16e3
  • python3-idle-3.6.8-62.el8.tuxcare.els19.x86_64.rpm
    sha:6c5adddc2fe52a4366c2bc7e4091ab82bcb0fa36dbc3512b8c27afd8533ee887
  • python3-libs-3.6.8-62.el8.tuxcare.els19.i686.rpm
    sha:608ba300c3cd45e69cb116d30277e7dc0f9525ae63a203e6091e39e1022cdf12
  • python3-libs-3.6.8-62.el8.tuxcare.els19.x86_64.rpm
    sha:dc7f97f99d4c8d440da16a9723f043fd73b339bd225fa174ad11cc5e1a9c65c5
  • python3-test-3.6.8-62.el8.tuxcare.els19.i686.rpm
    sha:d045c5d73c1bb76596ce1274aa73b5c11f838080f2d782414ad479c480065651
  • python3-test-3.6.8-62.el8.tuxcare.els19.x86_64.rpm
    sha:36fa424aa1bda5033d169b15fc6bcd54c61d204eff72a01f9b140177868e9faa
  • python3-tkinter-3.6.8-62.el8.tuxcare.els19.i686.rpm
    sha:7b41d749377b1a8d9d405c4f5308fff3e2ccfebfb14541e231c9926e0711b48b
  • python3-tkinter-3.6.8-62.el8.tuxcare.els19.x86_64.rpm
    sha:8ed9de678403885ec6b6b91bc4165934ea0ee539944d5552bad10fa67ba63316
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.