[CLSA-2026:1790159743] Fix CVE(s): CVE-2026-9669
Type:
security
Severity:
Important
Release date:
2026-09-23 10:35:54 UTC
Description:
* SECURITY UPDATE: stack buffer overflow when a bz2 decompressor is reused after a decompression error - debian/patches/CVE-2026-9669.patch: record the libbz2 error in BZ2FileObject and BZ2DecompObject in Modules/bz2module.c, route every read through a Util_BzRead() wrapper that reports the recorded error instead of re-entering the errored stream, and reject a reused BZ2Decompressor.decompress() with ValueError - CVE-2026-9669
CVEs fixed:
Updated packages:
  • idle-python2.7_2.7.18-8+deb11u1+tuxcare.els3_all.deb
    sha:a2e5964a5ae3fc963bdbe24c3e7884c70c93f03b
  • libpython2.7_2.7.18-8+deb11u1+tuxcare.els3_amd64.deb
    sha:3d83a4d56d281f9460cefa4643ce36df90e32118
  • libpython2.7-dev_2.7.18-8+deb11u1+tuxcare.els3_amd64.deb
    sha:311b3b1694c4d5bdfa9411ed7c27ee8a9a32a45f
  • libpython2.7-minimal_2.7.18-8+deb11u1+tuxcare.els3_amd64.deb
    sha:f1c85d0948c43f4d1041e67a175dfa4e750f5b06
  • libpython2.7-stdlib_2.7.18-8+deb11u1+tuxcare.els3_amd64.deb
    sha:08a08d724020e877e6cee692aff693b53bfc4a16
  • libpython2.7-testsuite_2.7.18-8+deb11u1+tuxcare.els3_all.deb
    sha:a6e99097660ca57f9ed716a41a301f154c9a7d16
  • python2.7_2.7.18-8+deb11u1+tuxcare.els3_amd64.deb
    sha:4c0823057c3cfe24f3c25d2f8bfd35954e3a86c9
  • python2.7-dev_2.7.18-8+deb11u1+tuxcare.els3_amd64.deb
    sha:e034310fe272ed0cb1b6c509ad8e4294cecbe76b
  • python2.7-doc_2.7.18-8+deb11u1+tuxcare.els3_all.deb
    sha:2373246c63987109c69ca08e6b50fef28e7efca7
  • python2.7-examples_2.7.18-8+deb11u1+tuxcare.els3_all.deb
    sha:08972ac1ed9372cd957071886fae0bb048a2c460
  • python2.7-minimal_2.7.18-8+deb11u1+tuxcare.els3_amd64.deb
    sha:eefea8a2f364a74541e3ecf180a75feb992613d2
  • libpython2.7_2.7.18-8+deb11u1+tuxcare.els3_arm64.deb
    sha:8a258b4dc566e2a1572d371a4ca49046caa085a6
  • libpython2.7-dev_2.7.18-8+deb11u1+tuxcare.els3_arm64.deb
    sha:d9b30e145fe047840ed1fe47a58d28bfe3a14e0d
  • libpython2.7-minimal_2.7.18-8+deb11u1+tuxcare.els3_arm64.deb
    sha:995e744e414d5932eaeeb17b799cf7297221f91c
  • libpython2.7-stdlib_2.7.18-8+deb11u1+tuxcare.els3_arm64.deb
    sha:34fcb14c556f41d5e2a7b261c5c3dbe916dd65ce
  • python2.7_2.7.18-8+deb11u1+tuxcare.els3_arm64.deb
    sha:77f1e759df26f317a34301b2d4942a72e907f6f6
  • python2.7-dev_2.7.18-8+deb11u1+tuxcare.els3_arm64.deb
    sha:2e9247cdf4bf7aaf15322bd77c5d4a0eef99cf60
  • python2.7-minimal_2.7.18-8+deb11u1+tuxcare.els3_arm64.deb
    sha:fd925f65dc48b19da6436fa563218c6ff99a5bf3
  • libpython2.7_2.7.18-8+deb11u1+tuxcare.els3_armel.deb
    sha:587bf449b0edbca281013ae0927c01f1b416809e
  • libpython2.7-dev_2.7.18-8+deb11u1+tuxcare.els3_armel.deb
    sha:e50505eb6488ebf60d224a181ced68c232a3f0b0
  • libpython2.7-minimal_2.7.18-8+deb11u1+tuxcare.els3_armel.deb
    sha:3a3804670fd499324438bb04cd66bdcddf4844b4
  • libpython2.7-stdlib_2.7.18-8+deb11u1+tuxcare.els3_armel.deb
    sha:c50c8b1ed88d5190347dbd068f3f49f12b3a0ad4
  • python2.7_2.7.18-8+deb11u1+tuxcare.els3_armel.deb
    sha:3bba6ad3870f67d265b90f37005aa6913f8c1714
  • python2.7-dev_2.7.18-8+deb11u1+tuxcare.els3_armel.deb
    sha:41cd6d0da30a027323ab94a26ac64d7ead7ef50e
  • python2.7-minimal_2.7.18-8+deb11u1+tuxcare.els3_armel.deb
    sha:7cfe4f1b60b733f0a6848292b0db6bb9db4144d9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.