Tuxcare Errata System 0.0.1 5.10 2026-04-17T13:55:16 Community Enterprise Operating System 10 - CVE-2021-3737: stop reading a header if it's too long - CVE-2019-20907: avoid infinite loop in the tarfile module - Build and testing fixes in spec Important TuxCare License Agreement CVE-2021-3737 CVE-2019-20907 cpe:/o:centos:centos:10 Community Enterprise Operating System 10 - CVE-2020-26116: prevent http header injection in httplib Important TuxCare License Agreement CVE-2020-26116 CVE-2020-8492 cpe:/o:centos:centos:10 Community Enterprise Operating System 10 - Fix CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435, CVE-2025-4517: fix multiple tarfile extraction filter bypasses (filter="tar"/filter="data") - fix test_tarfile.py Important TuxCare License Agreement CVE-2025-4435 CVE-2025-4330 CVE-2024-12718 CVE-2025-4517 CVE-2025-4138 cpe:/o:centos:centos:10 Community Enterprise Operating System 10 - CVE-2025-13837: fix memory denial of service in plistlib Moderate TuxCare License Agreement CVE-2025-13837 cpe:/o:centos:centos:10 Community Enterprise Operating System 10 - CVE-2015-20107: mailcap: sanitize the second argument which allowing shell commands injection Important TuxCare License Agreement CVE-2015-20107 cpe:/o:centos:centos:10 Community Enterprise Operating System 10 - CVE-2015-20107: sanitize the second argument, which allows shell command injection in the mailcap module Important TuxCare License Agreement CVE-2015-20107 cpe:/o:centos:centos:10 Community Enterprise Operating System 10 - CVE-2025-12084: remove quadratic behavior in xml.minidom node ID cache clearing Moderate TuxCare License Agreement CVE-2025-12084 cpe:/o:centos:centos:10 Community Enterprise Operating System 10 - CVE-2025-6075: fix quadratic complexity in os.path.expandvars() Moderate TuxCare License Agreement CVE-2025-6075 cpe:/o:centos:centos:10 Community Enterprise Operating System 10 - CVE-2025-8194: tarfile: validate archives to ensure member offsets are non-negative Important TuxCare License Agreement CVE-2025-8194 cpe:/o:centos:centos:10 Community Enterprise Operating System 10 - CVE-2025-8194: tarfile: validate archives to ensure member offsets are non-negative Important TuxCare License Agreement CVE-2025-8194 cpe:/o:centos:centos:10 Community Enterprise Operating System 10 - CVE-2025-6075: fix quadratic complexity in os.path.expandvars() Moderate TuxCare License Agreement CVE-2025-6075 cpe:/o:centos:centos:10 Community Enterprise Operating System 10 - CVE-2026-4519: reject leading dashes in webbrowser.open() URLs to prevent command-line option injection in browser subprocesses Low TuxCare License Agreement CVE-2026-4519 cpe:/o:centos:centos:10 alt-python27 alt-python27-debug alt-python27-devel alt-python27-libs alt-python27-test alt-python27-tkinter alt-python27-tools alt-python36 alt-python36-debug alt-python36-devel alt-python36-libs alt-python36-test alt-python36-tkinter alt-python36-tools x86_64 0:2.7.18-20.el10 d07bf2a08d50eb66 x86_64 0:2.7.18-21.el10 x86_64 0:3.6.15-13.el10 x86_64 0:3.6.15-16.el10 x86_64 0:2.7.18-22.el10 x86_64 0:3.6.15-17.el10 x86_64 0:2.7.18-23.el10 x86_64 0:3.6.15-18.el10 x86_64 0:3.6.15-19.el10 x86_64 0:2.7.18-24.el10 x86_64 0:2.7.18-25.el10 x86_64 0:3.6.15-20.el10