- CVE-2026-11940: tarfile: fix extraction-filter bypass via the hardlink-to-symlink extraction fallback; makelink_with_filter now re-runs the filter on the member re-rooted at the link's own path, so a crafted archive can no longer recreate a validated deeper symlink at a shallower path escaping the destination (incomplete fix of CVE-2025-4330) - CVE-2026-0864: configparser: normalize all line endings (CR, CRLF, LF) to '\n\t' when writing, preventing injection of unexpected keys, values, or sections through carriage returns in written values - CVE-2026-11972: tarfile: break _Stream.seek() at EOF in streaming mode (mode="r|"), preventing a CPU denial-of-service when a forged member header declares a huge size against an already-exhausted stream - CVE-2026-4360: tarfile: forward filter_function from TarFile.extract() to _extract_one(), so the hardlink/symlink extraction fallback applies the extraction filter on the single-member extract() path too; previously attacker-controlled mode, uid and gid were applied verbatim even with filter='data' and the CVE-2025-4330/CVE-2026-11940 fallback checks never ran there (cpython 7ccdbaba, gh-151987, follow-up to gh-151558)