{ "document": { "aggregate_severity": { "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-87910: tarfile ignored a filter's None (\"skip this member\") answer in\n the hard-link extraction fallback (CWE-59). The guard CVE-2026-11940 added to\n TarFile.makelink_with_filter() re-runs the filter on the referenced member\n re-rooted at the link's own, shallower name, but only reacted to the exceptions\n that extra call could raise and discarded its return value. A PEP 706 filter may\n also return None to mean \"skip this member\"; that answer was ignored, the second\n call made with the member's own name still succeeded, and the member was written\n at the link's path anyway - so a filter that downgrades FilterError to None did\n not stop the escape CVE-2026-11940 was meant to close.\n- debian/patches/CVE-2026-87910.patch: backport of cpython\n 9c17bace90f88dfba6d0e2fe23c8e7ae35f83955 (gh-157265), which keeps the first\n filter call's result and returns early when it is None, plus its regression test\n test_extract_filters_target_none. Applied after CVE-2026-11940.patch, whose\n guard it fixes; the two must not be separated or reordered.\n- CVE-2026-19672: tarfile 'tar'/'data' extraction filters created directories\n outside the destination for a member whose name leaves the destination and comes\n back (CWE-22). _get_filtered_attrs() checks containment on the resolved path, so\n a name such as '../evil/../dest/sub/file' passes, but the intermediate\n directories are created from the name as given and walk out of the destination\n on the way, leaving attacker-chosen directories next to it. POSIX only.\n- debian/patches/CVE-2026-19672.patch: backport of cpython\n 97688346ada2df3e5b9c279348862c3d64ab0823 (gh-155999), which normalizes a member\n name containing a '..' component before the containment check, plus its\n regression test test_parent_dir_out_and_back. Applied after CVE-2026-87910.patch.", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1790688641", "url": "https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1790688641" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_alt_python/el10/advisories/2026/clsa-2026_1790688641.json" } ], "tracking": { "current_release_date": "2026-09-29T13:31:42Z", "generator": { "date": "2026-09-29T13:31:42Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1790688641", "initial_release_date": "2026-09-29T13:31:42Z", "revision_history": [ { "date": "2026-09-29T13:31:42Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "alt-python39: Fix of 2 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Community Enterprise Operating System 10", "product": { "name": "Community Enterprise Operating System 10", "product_id": "CentOS-10", "product_identification_helper": { "cpe": "cpe:2.3:o:centos:centos:10:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Community Enterprise Operating System" } ], "category": "vendor", "name": "Cloud Linux Software, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "alt-python39-libs-0:3.9.23-29.el10.x86_64", "product": { "name": "alt-python39-libs-0:3.9.23-29.el10.x86_64", "product_id": "alt-python39-libs-0:3.9.23-29.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-libs@3.9.23-29.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-idle-0:3.9.23-29.el10.x86_64", "product": { "name": "alt-python39-idle-0:3.9.23-29.el10.x86_64", "product_id": "alt-python39-idle-0:3.9.23-29.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-idle@3.9.23-29.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-devel-0:3.9.23-29.el10.x86_64", "product": { "name": "alt-python39-devel-0:3.9.23-29.el10.x86_64", "product_id": "alt-python39-devel-0:3.9.23-29.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-devel@3.9.23-29.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-debug-0:3.9.23-29.el10.x86_64", "product": { "name": "alt-python39-debug-0:3.9.23-29.el10.x86_64", "product_id": "alt-python39-debug-0:3.9.23-29.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-debug@3.9.23-29.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-tkinter-0:3.9.23-29.el10.x86_64", "product": { "name": "alt-python39-tkinter-0:3.9.23-29.el10.x86_64", "product_id": "alt-python39-tkinter-0:3.9.23-29.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-tkinter@3.9.23-29.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-test-0:3.9.23-29.el10.x86_64", "product": { "name": "alt-python39-test-0:3.9.23-29.el10.x86_64", "product_id": "alt-python39-test-0:3.9.23-29.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-test@3.9.23-29.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-0:3.9.23-29.el10.x86_64", "product": { "name": "alt-python39-0:3.9.23-29.el10.x86_64", "product_id": "alt-python39-0:3.9.23-29.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39@3.9.23-29.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-0:3.9.23-28.el10.x86_64", "product": { "name": "alt-python39-0:3.9.23-28.el10.x86_64", "product_id": "alt-python39-0:3.9.23-28.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39@3.9.23-28.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-tkinter-0:3.9.23-28.el10.x86_64", "product": { "name": "alt-python39-tkinter-0:3.9.23-28.el10.x86_64", "product_id": "alt-python39-tkinter-0:3.9.23-28.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-tkinter@3.9.23-28.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-devel-0:3.9.23-28.el10.x86_64", "product": { "name": "alt-python39-devel-0:3.9.23-28.el10.x86_64", "product_id": "alt-python39-devel-0:3.9.23-28.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-devel@3.9.23-28.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-test-0:3.9.23-28.el10.x86_64", "product": { "name": "alt-python39-test-0:3.9.23-28.el10.x86_64", "product_id": "alt-python39-test-0:3.9.23-28.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-test@3.9.23-28.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-libs-0:3.9.23-28.el10.x86_64", "product": { "name": "alt-python39-libs-0:3.9.23-28.el10.x86_64", "product_id": "alt-python39-libs-0:3.9.23-28.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-libs@3.9.23-28.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-idle-0:3.9.23-28.el10.x86_64", "product": { "name": "alt-python39-idle-0:3.9.23-28.el10.x86_64", "product_id": "alt-python39-idle-0:3.9.23-28.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-idle@3.9.23-28.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-debug-0:3.9.23-28.el10.x86_64", "product": { "name": "alt-python39-debug-0:3.9.23-28.el10.x86_64", "product_id": "alt-python39-debug-0:3.9.23-28.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-debug@3.9.23-28.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-idle-0:3.9.23-26.el10.x86_64", "product": { "name": "alt-python39-idle-0:3.9.23-26.el10.x86_64", "product_id": "alt-python39-idle-0:3.9.23-26.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-idle@3.9.23-26.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-debug-0:3.9.23-26.el10.x86_64", "product": { "name": "alt-python39-debug-0:3.9.23-26.el10.x86_64", "product_id": "alt-python39-debug-0:3.9.23-26.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-debug@3.9.23-26.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-0:3.9.23-26.el10.x86_64", "product": { "name": "alt-python39-0:3.9.23-26.el10.x86_64", "product_id": "alt-python39-0:3.9.23-26.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39@3.9.23-26.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-devel-0:3.9.23-26.el10.x86_64", "product": { "name": "alt-python39-devel-0:3.9.23-26.el10.x86_64", "product_id": "alt-python39-devel-0:3.9.23-26.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-devel@3.9.23-26.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-tkinter-0:3.9.23-26.el10.x86_64", "product": { "name": "alt-python39-tkinter-0:3.9.23-26.el10.x86_64", "product_id": "alt-python39-tkinter-0:3.9.23-26.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-tkinter@3.9.23-26.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-test-0:3.9.23-26.el10.x86_64", "product": { "name": "alt-python39-test-0:3.9.23-26.el10.x86_64", "product_id": "alt-python39-test-0:3.9.23-26.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-test@3.9.23-26.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-libs-0:3.9.23-26.el10.x86_64", "product": { "name": "alt-python39-libs-0:3.9.23-26.el10.x86_64", "product_id": "alt-python39-libs-0:3.9.23-26.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-libs@3.9.23-26.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-0:3.9.23-25.el10.x86_64", "product": { "name": "alt-python39-0:3.9.23-25.el10.x86_64", "product_id": "alt-python39-0:3.9.23-25.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39@3.9.23-25.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-devel-0:3.9.23-25.el10.x86_64", "product": { "name": "alt-python39-devel-0:3.9.23-25.el10.x86_64", "product_id": "alt-python39-devel-0:3.9.23-25.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-devel@3.9.23-25.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-libs-0:3.9.23-25.el10.x86_64", "product": { "name": "alt-python39-libs-0:3.9.23-25.el10.x86_64", "product_id": "alt-python39-libs-0:3.9.23-25.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-libs@3.9.23-25.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-test-0:3.9.23-25.el10.x86_64", "product": { "name": "alt-python39-test-0:3.9.23-25.el10.x86_64", "product_id": "alt-python39-test-0:3.9.23-25.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-test@3.9.23-25.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-debug-0:3.9.23-25.el10.x86_64", "product": { "name": "alt-python39-debug-0:3.9.23-25.el10.x86_64", "product_id": "alt-python39-debug-0:3.9.23-25.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-debug@3.9.23-25.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-idle-0:3.9.23-25.el10.x86_64", "product": { "name": "alt-python39-idle-0:3.9.23-25.el10.x86_64", "product_id": "alt-python39-idle-0:3.9.23-25.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-idle@3.9.23-25.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-tkinter-0:3.9.23-25.el10.x86_64", "product": { "name": "alt-python39-tkinter-0:3.9.23-25.el10.x86_64", "product_id": "alt-python39-tkinter-0:3.9.23-25.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-tkinter@3.9.23-25.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-libs-0:3.9.23-21.el10.x86_64", "product": { "name": "alt-python39-libs-0:3.9.23-21.el10.x86_64", "product_id": "alt-python39-libs-0:3.9.23-21.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-libs@3.9.23-21.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-devel-0:3.9.23-21.el10.x86_64", "product": { "name": "alt-python39-devel-0:3.9.23-21.el10.x86_64", "product_id": "alt-python39-devel-0:3.9.23-21.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-devel@3.9.23-21.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-0:3.9.23-21.el10.x86_64", "product": { "name": "alt-python39-0:3.9.23-21.el10.x86_64", "product_id": "alt-python39-0:3.9.23-21.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39@3.9.23-21.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-test-0:3.9.23-21.el10.x86_64", "product": { "name": "alt-python39-test-0:3.9.23-21.el10.x86_64", "product_id": "alt-python39-test-0:3.9.23-21.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-test@3.9.23-21.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-idle-0:3.9.23-21.el10.x86_64", "product": { "name": "alt-python39-idle-0:3.9.23-21.el10.x86_64", "product_id": "alt-python39-idle-0:3.9.23-21.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-idle@3.9.23-21.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-tkinter-0:3.9.23-21.el10.x86_64", "product": { "name": "alt-python39-tkinter-0:3.9.23-21.el10.x86_64", "product_id": "alt-python39-tkinter-0:3.9.23-21.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-tkinter@3.9.23-21.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-debug-0:3.9.23-21.el10.x86_64", "product": { "name": "alt-python39-debug-0:3.9.23-21.el10.x86_64", "product_id": "alt-python39-debug-0:3.9.23-21.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-debug@3.9.23-21.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-idle-0:3.9.23-24.el10.x86_64", "product": { "name": "alt-python39-idle-0:3.9.23-24.el10.x86_64", "product_id": "alt-python39-idle-0:3.9.23-24.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-idle@3.9.23-24.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-test-0:3.9.23-24.el10.x86_64", "product": { "name": "alt-python39-test-0:3.9.23-24.el10.x86_64", "product_id": "alt-python39-test-0:3.9.23-24.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-test@3.9.23-24.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-tkinter-0:3.9.23-24.el10.x86_64", "product": { "name": "alt-python39-tkinter-0:3.9.23-24.el10.x86_64", "product_id": "alt-python39-tkinter-0:3.9.23-24.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-tkinter@3.9.23-24.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-debug-0:3.9.23-24.el10.x86_64", "product": { "name": "alt-python39-debug-0:3.9.23-24.el10.x86_64", "product_id": "alt-python39-debug-0:3.9.23-24.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-debug@3.9.23-24.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-libs-0:3.9.23-24.el10.x86_64", "product": { "name": "alt-python39-libs-0:3.9.23-24.el10.x86_64", "product_id": "alt-python39-libs-0:3.9.23-24.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-libs@3.9.23-24.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-devel-0:3.9.23-24.el10.x86_64", "product": { "name": "alt-python39-devel-0:3.9.23-24.el10.x86_64", "product_id": "alt-python39-devel-0:3.9.23-24.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-devel@3.9.23-24.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-0:3.9.23-24.el10.x86_64", "product": { "name": "alt-python39-0:3.9.23-24.el10.x86_64", "product_id": "alt-python39-0:3.9.23-24.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39@3.9.23-24.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-devel-0:3.9.23-19.el10.x86_64", "product": { "name": "alt-python39-devel-0:3.9.23-19.el10.x86_64", "product_id": "alt-python39-devel-0:3.9.23-19.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-devel@3.9.23-19.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-idle-0:3.9.23-19.el10.x86_64", "product": { "name": "alt-python39-idle-0:3.9.23-19.el10.x86_64", "product_id": "alt-python39-idle-0:3.9.23-19.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-idle@3.9.23-19.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-tkinter-0:3.9.23-19.el10.x86_64", "product": { "name": "alt-python39-tkinter-0:3.9.23-19.el10.x86_64", "product_id": "alt-python39-tkinter-0:3.9.23-19.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-tkinter@3.9.23-19.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-test-0:3.9.23-19.el10.x86_64", "product": { "name": "alt-python39-test-0:3.9.23-19.el10.x86_64", "product_id": "alt-python39-test-0:3.9.23-19.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-test@3.9.23-19.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-debug-0:3.9.23-19.el10.x86_64", "product": { "name": "alt-python39-debug-0:3.9.23-19.el10.x86_64", "product_id": "alt-python39-debug-0:3.9.23-19.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-debug@3.9.23-19.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-libs-0:3.9.23-19.el10.x86_64", "product": { "name": "alt-python39-libs-0:3.9.23-19.el10.x86_64", "product_id": "alt-python39-libs-0:3.9.23-19.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39-libs@3.9.23-19.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python39-0:3.9.23-19.el10.x86_64", "product": { "name": "alt-python39-0:3.9.23-19.el10.x86_64", "product_id": "alt-python39-0:3.9.23-19.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python39@3.9.23-19.el10?arch=x86_64&os_name=centos&os_version=10" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "alt-python39-libs-0:3.9.23-29.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-libs-0:3.9.23-29.el10.x86_64" }, "product_reference": "alt-python39-libs-0:3.9.23-29.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-idle-0:3.9.23-29.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-idle-0:3.9.23-29.el10.x86_64" }, "product_reference": "alt-python39-idle-0:3.9.23-29.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-devel-0:3.9.23-29.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-devel-0:3.9.23-29.el10.x86_64" }, "product_reference": "alt-python39-devel-0:3.9.23-29.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-debug-0:3.9.23-29.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-debug-0:3.9.23-29.el10.x86_64" }, "product_reference": "alt-python39-debug-0:3.9.23-29.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-tkinter-0:3.9.23-29.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-tkinter-0:3.9.23-29.el10.x86_64" }, "product_reference": "alt-python39-tkinter-0:3.9.23-29.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-test-0:3.9.23-29.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-test-0:3.9.23-29.el10.x86_64" }, "product_reference": "alt-python39-test-0:3.9.23-29.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-0:3.9.23-29.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-0:3.9.23-29.el10.x86_64" }, "product_reference": "alt-python39-0:3.9.23-29.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-0:3.9.23-28.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-0:3.9.23-28.el10.x86_64" }, "product_reference": "alt-python39-0:3.9.23-28.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-tkinter-0:3.9.23-28.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-tkinter-0:3.9.23-28.el10.x86_64" }, "product_reference": "alt-python39-tkinter-0:3.9.23-28.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-devel-0:3.9.23-28.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-devel-0:3.9.23-28.el10.x86_64" }, "product_reference": "alt-python39-devel-0:3.9.23-28.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-test-0:3.9.23-28.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-test-0:3.9.23-28.el10.x86_64" }, "product_reference": "alt-python39-test-0:3.9.23-28.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-libs-0:3.9.23-28.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-libs-0:3.9.23-28.el10.x86_64" }, "product_reference": "alt-python39-libs-0:3.9.23-28.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-idle-0:3.9.23-28.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-idle-0:3.9.23-28.el10.x86_64" }, "product_reference": "alt-python39-idle-0:3.9.23-28.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-debug-0:3.9.23-28.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-debug-0:3.9.23-28.el10.x86_64" }, "product_reference": "alt-python39-debug-0:3.9.23-28.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-idle-0:3.9.23-26.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-idle-0:3.9.23-26.el10.x86_64" }, "product_reference": "alt-python39-idle-0:3.9.23-26.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-debug-0:3.9.23-26.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-debug-0:3.9.23-26.el10.x86_64" }, "product_reference": "alt-python39-debug-0:3.9.23-26.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-0:3.9.23-26.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-0:3.9.23-26.el10.x86_64" }, "product_reference": "alt-python39-0:3.9.23-26.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-devel-0:3.9.23-26.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-devel-0:3.9.23-26.el10.x86_64" }, "product_reference": "alt-python39-devel-0:3.9.23-26.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-tkinter-0:3.9.23-26.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-tkinter-0:3.9.23-26.el10.x86_64" }, "product_reference": "alt-python39-tkinter-0:3.9.23-26.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-test-0:3.9.23-26.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-test-0:3.9.23-26.el10.x86_64" }, "product_reference": "alt-python39-test-0:3.9.23-26.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-libs-0:3.9.23-26.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-libs-0:3.9.23-26.el10.x86_64" }, "product_reference": "alt-python39-libs-0:3.9.23-26.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-0:3.9.23-25.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-0:3.9.23-25.el10.x86_64" }, "product_reference": "alt-python39-0:3.9.23-25.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-devel-0:3.9.23-25.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-devel-0:3.9.23-25.el10.x86_64" }, "product_reference": "alt-python39-devel-0:3.9.23-25.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-libs-0:3.9.23-25.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-libs-0:3.9.23-25.el10.x86_64" }, "product_reference": "alt-python39-libs-0:3.9.23-25.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-test-0:3.9.23-25.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-test-0:3.9.23-25.el10.x86_64" }, "product_reference": "alt-python39-test-0:3.9.23-25.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-debug-0:3.9.23-25.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-debug-0:3.9.23-25.el10.x86_64" }, "product_reference": "alt-python39-debug-0:3.9.23-25.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-idle-0:3.9.23-25.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-idle-0:3.9.23-25.el10.x86_64" }, "product_reference": "alt-python39-idle-0:3.9.23-25.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-tkinter-0:3.9.23-25.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-tkinter-0:3.9.23-25.el10.x86_64" }, "product_reference": "alt-python39-tkinter-0:3.9.23-25.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-libs-0:3.9.23-21.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-libs-0:3.9.23-21.el10.x86_64" }, "product_reference": "alt-python39-libs-0:3.9.23-21.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-devel-0:3.9.23-21.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-devel-0:3.9.23-21.el10.x86_64" }, "product_reference": "alt-python39-devel-0:3.9.23-21.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-0:3.9.23-21.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-0:3.9.23-21.el10.x86_64" }, "product_reference": "alt-python39-0:3.9.23-21.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-test-0:3.9.23-21.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-test-0:3.9.23-21.el10.x86_64" }, "product_reference": "alt-python39-test-0:3.9.23-21.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-idle-0:3.9.23-21.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-idle-0:3.9.23-21.el10.x86_64" }, "product_reference": "alt-python39-idle-0:3.9.23-21.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-tkinter-0:3.9.23-21.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-tkinter-0:3.9.23-21.el10.x86_64" }, "product_reference": "alt-python39-tkinter-0:3.9.23-21.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-debug-0:3.9.23-21.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-debug-0:3.9.23-21.el10.x86_64" }, "product_reference": "alt-python39-debug-0:3.9.23-21.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-idle-0:3.9.23-24.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-idle-0:3.9.23-24.el10.x86_64" }, "product_reference": "alt-python39-idle-0:3.9.23-24.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-test-0:3.9.23-24.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-test-0:3.9.23-24.el10.x86_64" }, "product_reference": "alt-python39-test-0:3.9.23-24.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-tkinter-0:3.9.23-24.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-tkinter-0:3.9.23-24.el10.x86_64" }, "product_reference": "alt-python39-tkinter-0:3.9.23-24.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-debug-0:3.9.23-24.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-debug-0:3.9.23-24.el10.x86_64" }, "product_reference": "alt-python39-debug-0:3.9.23-24.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-libs-0:3.9.23-24.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-libs-0:3.9.23-24.el10.x86_64" }, "product_reference": "alt-python39-libs-0:3.9.23-24.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-devel-0:3.9.23-24.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-devel-0:3.9.23-24.el10.x86_64" }, "product_reference": "alt-python39-devel-0:3.9.23-24.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-0:3.9.23-24.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-0:3.9.23-24.el10.x86_64" }, "product_reference": "alt-python39-0:3.9.23-24.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-devel-0:3.9.23-19.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-devel-0:3.9.23-19.el10.x86_64" }, "product_reference": "alt-python39-devel-0:3.9.23-19.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-idle-0:3.9.23-19.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-idle-0:3.9.23-19.el10.x86_64" }, "product_reference": "alt-python39-idle-0:3.9.23-19.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-tkinter-0:3.9.23-19.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-tkinter-0:3.9.23-19.el10.x86_64" }, "product_reference": "alt-python39-tkinter-0:3.9.23-19.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-test-0:3.9.23-19.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-test-0:3.9.23-19.el10.x86_64" }, "product_reference": "alt-python39-test-0:3.9.23-19.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-debug-0:3.9.23-19.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-debug-0:3.9.23-19.el10.x86_64" }, "product_reference": "alt-python39-debug-0:3.9.23-19.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-libs-0:3.9.23-19.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-libs-0:3.9.23-19.el10.x86_64" }, "product_reference": "alt-python39-libs-0:3.9.23-19.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python39-0:3.9.23-19.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python39-0:3.9.23-19.el10.x86_64" }, "product_reference": "alt-python39-0:3.9.23-19.el10.x86_64", "relates_to_product_reference": "CentOS-10" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-19672", "notes": [ { "category": "description", "text": "The tarfile module's tar and data\n extraction filters created directories outside the destination for \nmembers whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given.\n\nOnly\n empty directories are created outside the destination. Member contents \nare still extracted inside it. To return to the destination the member's\n name must contain the destination directory's own final component, so \nextraction into a secure randomised directory is not affected.\n\nThis affects POSIX platforms only. On Windows, .. components are collapsed before the path reaches the filesystem, so the directories outside the destination are never created.\n", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-10:alt-python39-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-29.el10.x86_64" ], "known_affected": [ "CentOS-10:alt-python39-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-28.el10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-python/cve/CVE-2026-19672" } ], "remediations": [ { "category": "vendor_fix", "date": "2026-09-29T13:30:44.074997Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1790688641", "product_ids": [ "CentOS-10:alt-python39-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-29.el10.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1790688641" }, { "category": "none_available", "details": "Affected", "product_ids": [ "CentOS-10:alt-python39-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-28.el10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-87910", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')" }, "notes": [ { "category": "description", "text": "When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was ignored. Instead, the member should be skipped if either call returns None.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-10:alt-python39-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-29.el10.x86_64" ], "known_affected": [ "CentOS-10:alt-python39-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-28.el10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-python/cve/CVE-2026-87910" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955", "url": "https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b", "url": "https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2", "url": "https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/157265", "url": "https://github.com/python/cpython/issues/157265" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/157266", "url": "https://github.com/python/cpython/pull/157266" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/09/11/8", "url": "http://www.openwall.com/lists/oss-security/2026/09/11/8" } ], "release_date": "2026-09-11T18:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-29T13:30:44.074997Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1790688641", "product_ids": [ "CentOS-10:alt-python39-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-29.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-29.el10.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1790688641" }, { "category": "none_available", "date": "2026-09-11T18:16:00Z", "details": "Affected", "product_ids": [ "CentOS-10:alt-python39-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-debug-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-devel-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-idle-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-libs-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-test-0:3.9.23-28.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-19.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-21.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-24.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-25.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-26.el10.x86_64", "CentOS-10:alt-python39-tkinter-0:3.9.23-28.el10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }