[CLSA-2026:1785401590] python3: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-07-30 12:12:14 UTC
Description:
- CVE-2026-6100: clear dangling next_in pointer after MemoryError in bz2/lzma decompress to avoid use-after-free on decompressor reuse - CVE-2026-11972: break tarfile._Stream.seek block-skip loop at EOF to avoid a hang on crafted streaming archives
Updated packages:
  • python3-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:3990336b97df3e9975d494939fecf81b8affcfc8ad43143548544df4d650ac59
  • python3-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:756798c5f74a8eec2f6c4149fc0c24fadb415e91a7a8248e361ea98849f2f3b0
  • python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:d5792fc72124ea3424dbb31acfd9cc6bfa7e7750735c712835073968e52e54a0
  • python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:8aaf2b0236b2a512c89f3537dbeb5a3708f2749b262a44682290d9f7e0e3c3f9
  • python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:892d96273dc721955635e214ec4d843b20fd1918f1ff22870fe65acb51617c61
  • python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:af188b439870d3a2dc98eef7b1e9899de7563cb259d6b880d17c652d51b9f21a
  • python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:5c10d9b06e40014e7b95c14f3b38d431309d7ab7d415de0fea739e7c5aefa6ad
  • python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:83137c58c3720fa4360ef509b71462beda07d11afa826f7e6b1cb55c4db6b901
  • python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:7622c8e79778e57a1b6a0510f95fff91d09c8c238362b9095168d8de57ccbd3e
  • python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:6407966f4ef89d7eadff4ee9de7e70e0fcb6ba2e21e9cbe54ffeda28b5e6cb4a
  • python3-test-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:029775ff9120c17b72f9fdbc203b696e87192dae1027565b1f1b8504eb95c567
  • python3-test-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:16ceece29e2c2e6e24e4feddd310e7a81ce7f19d6727e916859d689bf7c9418f
  • python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm
    sha:3b1910f5cff36e3626cb95e21f010eb271c97fb9351fec429c78f5c7a28f00b9
  • python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm
    sha:8e3e4b8df1cb9758b3e4042b4a859a6212c8dff8ae301b21021a0f66a7303353
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.