{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-82049: resolve the hard-link source before os.link() in\n tarfile's makelink_with_filter(), so a crafted archive whose hard link\n targets a just-extracted symlink can no longer duplicate that symlink\n inode one directory shallower, where its relative payload re-bases\n outside the destination and the following chmod/utime act on the\n outside file (CWE-59). Carries upstream's test_sneaky_hardlink_relocation.\n Effective only together with CVE-2026-11940, which is native in 3.12.14\n and blocks the no-decoy variant that never reaches os.link() under the\n \"data\" filter", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1790167336", "url": "https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1790167336" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_alt_python/el10/advisories/2026/clsa-2026_1790167336.json" } ], "tracking": { "current_release_date": "2026-09-23T12:43:12Z", "generator": { "date": "2026-09-23T12:43:12Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1790167336", "initial_release_date": "2026-09-23T12:43:12Z", "revision_history": [ { "date": "2026-09-23T12:43:12Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "alt-python312: Fix of 2 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Community Enterprise Operating System 10", "product": { "name": "Community Enterprise Operating System 10", "product_id": "CentOS-10", "product_identification_helper": { "cpe": "cpe:2.3:o:centos:centos:10:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Community Enterprise Operating System" } ], "category": "vendor", "name": "Cloud Linux Software, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "alt-python312-debug-0:3.12.14-6.el10.x86_64", "product": { "name": "alt-python312-debug-0:3.12.14-6.el10.x86_64", "product_id": "alt-python312-debug-0:3.12.14-6.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-debug@3.12.14-6.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-libs-0:3.12.14-6.el10.x86_64", "product": { "name": "alt-python312-libs-0:3.12.14-6.el10.x86_64", "product_id": "alt-python312-libs-0:3.12.14-6.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-libs@3.12.14-6.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-test-0:3.12.14-6.el10.x86_64", "product": { "name": "alt-python312-test-0:3.12.14-6.el10.x86_64", "product_id": "alt-python312-test-0:3.12.14-6.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-test@3.12.14-6.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-tkinter-0:3.12.14-6.el10.x86_64", "product": { "name": "alt-python312-tkinter-0:3.12.14-6.el10.x86_64", "product_id": "alt-python312-tkinter-0:3.12.14-6.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-tkinter@3.12.14-6.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-0:3.12.14-6.el10.x86_64", "product": { "name": "alt-python312-0:3.12.14-6.el10.x86_64", "product_id": "alt-python312-0:3.12.14-6.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312@3.12.14-6.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-devel-0:3.12.14-6.el10.x86_64", "product": { "name": "alt-python312-devel-0:3.12.14-6.el10.x86_64", "product_id": "alt-python312-devel-0:3.12.14-6.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-devel@3.12.14-6.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-idle-0:3.12.14-6.el10.x86_64", "product": { "name": "alt-python312-idle-0:3.12.14-6.el10.x86_64", "product_id": "alt-python312-idle-0:3.12.14-6.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-idle@3.12.14-6.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-idle-0:3.12.14-1.el10.x86_64", "product": { "name": "alt-python312-idle-0:3.12.14-1.el10.x86_64", "product_id": "alt-python312-idle-0:3.12.14-1.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-idle@3.12.14-1.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-debug-0:3.12.14-1.el10.x86_64", "product": { "name": "alt-python312-debug-0:3.12.14-1.el10.x86_64", "product_id": "alt-python312-debug-0:3.12.14-1.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-debug@3.12.14-1.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-0:3.12.14-1.el10.x86_64", "product": { "name": "alt-python312-0:3.12.14-1.el10.x86_64", "product_id": "alt-python312-0:3.12.14-1.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312@3.12.14-1.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-devel-0:3.12.14-1.el10.x86_64", "product": { "name": "alt-python312-devel-0:3.12.14-1.el10.x86_64", "product_id": "alt-python312-devel-0:3.12.14-1.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-devel@3.12.14-1.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-tkinter-0:3.12.14-1.el10.x86_64", "product": { "name": "alt-python312-tkinter-0:3.12.14-1.el10.x86_64", "product_id": "alt-python312-tkinter-0:3.12.14-1.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-tkinter@3.12.14-1.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-test-0:3.12.14-1.el10.x86_64", "product": { "name": "alt-python312-test-0:3.12.14-1.el10.x86_64", "product_id": "alt-python312-test-0:3.12.14-1.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-test@3.12.14-1.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-libs-0:3.12.14-1.el10.x86_64", "product": { "name": "alt-python312-libs-0:3.12.14-1.el10.x86_64", "product_id": "alt-python312-libs-0:3.12.14-1.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-libs@3.12.14-1.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-tkinter-0:3.12.14-5.el10.x86_64", "product": { "name": "alt-python312-tkinter-0:3.12.14-5.el10.x86_64", "product_id": "alt-python312-tkinter-0:3.12.14-5.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-tkinter@3.12.14-5.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-devel-0:3.12.14-5.el10.x86_64", "product": { "name": "alt-python312-devel-0:3.12.14-5.el10.x86_64", "product_id": "alt-python312-devel-0:3.12.14-5.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-devel@3.12.14-5.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-debug-0:3.12.14-5.el10.x86_64", "product": { "name": "alt-python312-debug-0:3.12.14-5.el10.x86_64", "product_id": "alt-python312-debug-0:3.12.14-5.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-debug@3.12.14-5.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-idle-0:3.12.14-5.el10.x86_64", "product": { "name": "alt-python312-idle-0:3.12.14-5.el10.x86_64", "product_id": "alt-python312-idle-0:3.12.14-5.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-idle@3.12.14-5.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-0:3.12.14-5.el10.x86_64", "product": { "name": "alt-python312-0:3.12.14-5.el10.x86_64", "product_id": "alt-python312-0:3.12.14-5.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312@3.12.14-5.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-libs-0:3.12.14-5.el10.x86_64", "product": { "name": "alt-python312-libs-0:3.12.14-5.el10.x86_64", "product_id": "alt-python312-libs-0:3.12.14-5.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-libs@3.12.14-5.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-test-0:3.12.14-5.el10.x86_64", "product": { "name": "alt-python312-test-0:3.12.14-5.el10.x86_64", "product_id": "alt-python312-test-0:3.12.14-5.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-test@3.12.14-5.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-tkinter-0:3.12.14-4.el10.x86_64", "product": { "name": "alt-python312-tkinter-0:3.12.14-4.el10.x86_64", "product_id": "alt-python312-tkinter-0:3.12.14-4.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-tkinter@3.12.14-4.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-debug-0:3.12.14-4.el10.x86_64", "product": { "name": "alt-python312-debug-0:3.12.14-4.el10.x86_64", "product_id": "alt-python312-debug-0:3.12.14-4.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-debug@3.12.14-4.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-libs-0:3.12.14-4.el10.x86_64", "product": { "name": "alt-python312-libs-0:3.12.14-4.el10.x86_64", "product_id": "alt-python312-libs-0:3.12.14-4.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-libs@3.12.14-4.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-test-0:3.12.14-4.el10.x86_64", "product": { "name": "alt-python312-test-0:3.12.14-4.el10.x86_64", "product_id": "alt-python312-test-0:3.12.14-4.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-test@3.12.14-4.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-0:3.12.14-4.el10.x86_64", "product": { "name": "alt-python312-0:3.12.14-4.el10.x86_64", "product_id": "alt-python312-0:3.12.14-4.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312@3.12.14-4.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-devel-0:3.12.14-4.el10.x86_64", "product": { "name": "alt-python312-devel-0:3.12.14-4.el10.x86_64", "product_id": "alt-python312-devel-0:3.12.14-4.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-devel@3.12.14-4.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-idle-0:3.12.14-4.el10.x86_64", "product": { "name": "alt-python312-idle-0:3.12.14-4.el10.x86_64", "product_id": "alt-python312-idle-0:3.12.14-4.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-idle@3.12.14-4.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-libs-0:3.12.14-3.el10.x86_64", "product": { "name": "alt-python312-libs-0:3.12.14-3.el10.x86_64", "product_id": "alt-python312-libs-0:3.12.14-3.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-libs@3.12.14-3.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-0:3.12.14-3.el10.x86_64", "product": { "name": "alt-python312-0:3.12.14-3.el10.x86_64", "product_id": "alt-python312-0:3.12.14-3.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312@3.12.14-3.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-devel-0:3.12.14-3.el10.x86_64", "product": { "name": "alt-python312-devel-0:3.12.14-3.el10.x86_64", "product_id": "alt-python312-devel-0:3.12.14-3.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-devel@3.12.14-3.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-tkinter-0:3.12.14-3.el10.x86_64", "product": { "name": "alt-python312-tkinter-0:3.12.14-3.el10.x86_64", "product_id": "alt-python312-tkinter-0:3.12.14-3.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-tkinter@3.12.14-3.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-test-0:3.12.14-3.el10.x86_64", "product": { "name": "alt-python312-test-0:3.12.14-3.el10.x86_64", "product_id": "alt-python312-test-0:3.12.14-3.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-test@3.12.14-3.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-debug-0:3.12.14-3.el10.x86_64", "product": { "name": "alt-python312-debug-0:3.12.14-3.el10.x86_64", "product_id": "alt-python312-debug-0:3.12.14-3.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-debug@3.12.14-3.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-idle-0:3.12.14-3.el10.x86_64", "product": { "name": "alt-python312-idle-0:3.12.14-3.el10.x86_64", "product_id": "alt-python312-idle-0:3.12.14-3.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-idle@3.12.14-3.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-0:3.12.14-2.el10.x86_64", "product": { "name": "alt-python312-0:3.12.14-2.el10.x86_64", "product_id": "alt-python312-0:3.12.14-2.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312@3.12.14-2.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-idle-0:3.12.14-2.el10.x86_64", "product": { "name": "alt-python312-idle-0:3.12.14-2.el10.x86_64", "product_id": "alt-python312-idle-0:3.12.14-2.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-idle@3.12.14-2.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-tkinter-0:3.12.14-2.el10.x86_64", "product": { "name": "alt-python312-tkinter-0:3.12.14-2.el10.x86_64", "product_id": "alt-python312-tkinter-0:3.12.14-2.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-tkinter@3.12.14-2.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-debug-0:3.12.14-2.el10.x86_64", "product": { "name": "alt-python312-debug-0:3.12.14-2.el10.x86_64", "product_id": "alt-python312-debug-0:3.12.14-2.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-debug@3.12.14-2.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-devel-0:3.12.14-2.el10.x86_64", "product": { "name": "alt-python312-devel-0:3.12.14-2.el10.x86_64", "product_id": "alt-python312-devel-0:3.12.14-2.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-devel@3.12.14-2.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-test-0:3.12.14-2.el10.x86_64", "product": { "name": "alt-python312-test-0:3.12.14-2.el10.x86_64", "product_id": "alt-python312-test-0:3.12.14-2.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-test@3.12.14-2.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-python312-libs-0:3.12.14-2.el10.x86_64", "product": { "name": "alt-python312-libs-0:3.12.14-2.el10.x86_64", "product_id": "alt-python312-libs-0:3.12.14-2.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python312-libs@3.12.14-2.el10?arch=x86_64&os_name=centos&os_version=10" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "alt-python312-debug-0:3.12.14-6.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-debug-0:3.12.14-6.el10.x86_64" }, "product_reference": "alt-python312-debug-0:3.12.14-6.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-libs-0:3.12.14-6.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-libs-0:3.12.14-6.el10.x86_64" }, "product_reference": "alt-python312-libs-0:3.12.14-6.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-test-0:3.12.14-6.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-test-0:3.12.14-6.el10.x86_64" }, "product_reference": "alt-python312-test-0:3.12.14-6.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-tkinter-0:3.12.14-6.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-tkinter-0:3.12.14-6.el10.x86_64" }, "product_reference": "alt-python312-tkinter-0:3.12.14-6.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-0:3.12.14-6.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-0:3.12.14-6.el10.x86_64" }, "product_reference": "alt-python312-0:3.12.14-6.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-devel-0:3.12.14-6.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-devel-0:3.12.14-6.el10.x86_64" }, "product_reference": "alt-python312-devel-0:3.12.14-6.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-idle-0:3.12.14-6.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-idle-0:3.12.14-6.el10.x86_64" }, "product_reference": "alt-python312-idle-0:3.12.14-6.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-idle-0:3.12.14-1.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-idle-0:3.12.14-1.el10.x86_64" }, "product_reference": "alt-python312-idle-0:3.12.14-1.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-debug-0:3.12.14-1.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-debug-0:3.12.14-1.el10.x86_64" }, "product_reference": "alt-python312-debug-0:3.12.14-1.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-0:3.12.14-1.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-0:3.12.14-1.el10.x86_64" }, "product_reference": "alt-python312-0:3.12.14-1.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-devel-0:3.12.14-1.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-devel-0:3.12.14-1.el10.x86_64" }, "product_reference": "alt-python312-devel-0:3.12.14-1.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-tkinter-0:3.12.14-1.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-tkinter-0:3.12.14-1.el10.x86_64" }, "product_reference": "alt-python312-tkinter-0:3.12.14-1.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-test-0:3.12.14-1.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-test-0:3.12.14-1.el10.x86_64" }, "product_reference": "alt-python312-test-0:3.12.14-1.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-libs-0:3.12.14-1.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-libs-0:3.12.14-1.el10.x86_64" }, "product_reference": "alt-python312-libs-0:3.12.14-1.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-tkinter-0:3.12.14-5.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-tkinter-0:3.12.14-5.el10.x86_64" }, "product_reference": "alt-python312-tkinter-0:3.12.14-5.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-devel-0:3.12.14-5.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-devel-0:3.12.14-5.el10.x86_64" }, "product_reference": "alt-python312-devel-0:3.12.14-5.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-debug-0:3.12.14-5.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-debug-0:3.12.14-5.el10.x86_64" }, "product_reference": "alt-python312-debug-0:3.12.14-5.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-idle-0:3.12.14-5.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-idle-0:3.12.14-5.el10.x86_64" }, "product_reference": "alt-python312-idle-0:3.12.14-5.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-0:3.12.14-5.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-0:3.12.14-5.el10.x86_64" }, "product_reference": "alt-python312-0:3.12.14-5.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-libs-0:3.12.14-5.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-libs-0:3.12.14-5.el10.x86_64" }, "product_reference": "alt-python312-libs-0:3.12.14-5.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-test-0:3.12.14-5.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-test-0:3.12.14-5.el10.x86_64" }, "product_reference": "alt-python312-test-0:3.12.14-5.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-tkinter-0:3.12.14-4.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-tkinter-0:3.12.14-4.el10.x86_64" }, "product_reference": "alt-python312-tkinter-0:3.12.14-4.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-debug-0:3.12.14-4.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-debug-0:3.12.14-4.el10.x86_64" }, "product_reference": "alt-python312-debug-0:3.12.14-4.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-libs-0:3.12.14-4.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-libs-0:3.12.14-4.el10.x86_64" }, "product_reference": "alt-python312-libs-0:3.12.14-4.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-test-0:3.12.14-4.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-test-0:3.12.14-4.el10.x86_64" }, "product_reference": "alt-python312-test-0:3.12.14-4.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-0:3.12.14-4.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-0:3.12.14-4.el10.x86_64" }, "product_reference": "alt-python312-0:3.12.14-4.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-devel-0:3.12.14-4.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-devel-0:3.12.14-4.el10.x86_64" }, "product_reference": "alt-python312-devel-0:3.12.14-4.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-idle-0:3.12.14-4.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-idle-0:3.12.14-4.el10.x86_64" }, "product_reference": "alt-python312-idle-0:3.12.14-4.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-libs-0:3.12.14-3.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-libs-0:3.12.14-3.el10.x86_64" }, "product_reference": "alt-python312-libs-0:3.12.14-3.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-0:3.12.14-3.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-0:3.12.14-3.el10.x86_64" }, "product_reference": "alt-python312-0:3.12.14-3.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-devel-0:3.12.14-3.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-devel-0:3.12.14-3.el10.x86_64" }, "product_reference": "alt-python312-devel-0:3.12.14-3.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-tkinter-0:3.12.14-3.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-tkinter-0:3.12.14-3.el10.x86_64" }, "product_reference": "alt-python312-tkinter-0:3.12.14-3.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-test-0:3.12.14-3.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-test-0:3.12.14-3.el10.x86_64" }, "product_reference": "alt-python312-test-0:3.12.14-3.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-debug-0:3.12.14-3.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-debug-0:3.12.14-3.el10.x86_64" }, "product_reference": "alt-python312-debug-0:3.12.14-3.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-idle-0:3.12.14-3.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-idle-0:3.12.14-3.el10.x86_64" }, "product_reference": "alt-python312-idle-0:3.12.14-3.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-0:3.12.14-2.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-0:3.12.14-2.el10.x86_64" }, "product_reference": "alt-python312-0:3.12.14-2.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-idle-0:3.12.14-2.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-idle-0:3.12.14-2.el10.x86_64" }, "product_reference": "alt-python312-idle-0:3.12.14-2.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-tkinter-0:3.12.14-2.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-tkinter-0:3.12.14-2.el10.x86_64" }, "product_reference": "alt-python312-tkinter-0:3.12.14-2.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-debug-0:3.12.14-2.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-debug-0:3.12.14-2.el10.x86_64" }, "product_reference": "alt-python312-debug-0:3.12.14-2.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-devel-0:3.12.14-2.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-devel-0:3.12.14-2.el10.x86_64" }, "product_reference": "alt-python312-devel-0:3.12.14-2.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-test-0:3.12.14-2.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-test-0:3.12.14-2.el10.x86_64" }, "product_reference": "alt-python312-test-0:3.12.14-2.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python312-libs-0:3.12.14-2.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-python312-libs-0:3.12.14-2.el10.x86_64" }, "product_reference": "alt-python312-libs-0:3.12.14-2.el10.x86_64", "relates_to_product_reference": "CentOS-10" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-2297", "cwe": { "id": "CWE-668", "name": "Exposure of Resource to Wrong Sphere" }, "notes": [ { "category": "description", "text": "The import hook in CPython that handles legacy *.pyc files (SourcelessFileLoader) is incorrectly handled in FileLoader (a base class) and so does not use io.open_code() to read the .pyc files. sys.audit handlers for this audit event therefore do not fire.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-10:alt-python312-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-6.el10.x86_64" ], "known_affected": [ "CentOS-10:alt-python312-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-5.el10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-python/cve/CVE-2026-2297" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/482d6f8bdba9da3725d272e8bb4a2d25fb6a603e", "url": "https://github.com/python/cpython/commit/482d6f8bdba9da3725d272e8bb4a2d25fb6a603e" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/69ddd9bb2cc4bd69b1565647c18659c6a789ccd9", "url": "https://github.com/python/cpython/commit/69ddd9bb2cc4bd69b1565647c18659c6a789ccd9" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/876858c9f65d9ab656c7fa639f268ce7856d89dd", "url": "https://github.com/python/cpython/commit/876858c9f65d9ab656c7fa639f268ce7856d89dd" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/a51b1b512de1d56b3714b65628a2eae2b07e535e", "url": "https://github.com/python/cpython/commit/a51b1b512de1d56b3714b65628a2eae2b07e535e" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/c70adad78caeeea33f92f560ecb93331ca11bf66", "url": "https://github.com/python/cpython/commit/c70adad78caeeea33f92f560ecb93331ca11bf66" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/e58e9802b9bec5cdbf48fc9bf1da5f4fda482e86", "url": "https://github.com/python/cpython/commit/e58e9802b9bec5cdbf48fc9bf1da5f4fda482e86" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/145506", "url": "https://github.com/python/cpython/issues/145506" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/145507", "url": "https://github.com/python/cpython/pull/145507" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/03/05/6", "url": "http://www.openwall.com/lists/oss-security/2026/03/05/6" } ], "release_date": "2026-03-04T22:10:43Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-23T12:42:18.559228Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1790167336", "product_ids": [ "CentOS-10:alt-python312-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-6.el10.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1790167336" }, { "category": "none_available", "date": "2026-03-04T22:10:43Z", "details": "Affected", "product_ids": [ "CentOS-10:alt-python312-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-5.el10.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "CentOS-10:alt-python312-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-5.el10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2026-82049", "cwe": { "id": "CWE-59", "name": "Improper Link Resolution Before File Access ('Link Following')" }, "notes": [ { "category": "description", "text": "In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose the contents of that file within the extracted tree.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-10:alt-python312-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-6.el10.x86_64" ], "known_affected": [ "CentOS-10:alt-python312-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-5.el10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-python/cve/CVE-2026-82049" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/5a57248b22ad3b9aafcaaadae2c304a1923daeca", "url": "https://github.com/python/cpython/commit/5a57248b22ad3b9aafcaaadae2c304a1923daeca" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/b38be2e6cf9d989075ab73412c63e003ebad4ff3", "url": "https://github.com/python/cpython/commit/b38be2e6cf9d989075ab73412c63e003ebad4ff3" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/b8f23e307097552eaea2604383a12ab280520d0d", "url": "https://github.com/python/cpython/commit/b8f23e307097552eaea2604383a12ab280520d0d" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/157190", "url": "https://github.com/python/cpython/issues/157190" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/157191", "url": "https://github.com/python/cpython/pull/157191" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/EFJWGAZJA56AKSBR2WHMHQZO7RRLZPRH/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/EFJWGAZJA56AKSBR2WHMHQZO7RRLZPRH/" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/09/14/27", "url": "http://www.openwall.com/lists/oss-security/2026/09/14/27" } ], "release_date": "2026-09-14T19:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-23T12:42:18.559228Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1790167336", "product_ids": [ "CentOS-10:alt-python312-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-6.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-6.el10.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1790167336" }, { "category": "none_available", "date": "2026-09-14T19:17:00Z", "details": "Affected", "product_ids": [ "CentOS-10:alt-python312-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-debug-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-devel-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-idle-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-libs-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-test-0:3.12.14-5.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-1.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-2.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-3.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-4.el10.x86_64", "CentOS-10:alt-python312-tkinter-0:3.12.14-5.el10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }