[CLSA-2026:1792809372] python: Fix of CVE-2026-6100
Type:
security
Severity:
Critical
Release date:
2026-10-24 02:36:23 UTC
Description:
- CVE-2026-6100: fix a use-after-free in the bz2 and zlib modules when a decompressor object is reused after a MemoryError; the input pointer to the released caller buffer is no longer kept, so a later decompressobj().flush() (as done by gzip.GzipFile at EOF) cannot read it
CVEs fixed:
Updated packages:
  • python-2.6.6-70.el6.tuxcare.els31.i686.rpm
    sha:937da430be1e15287718d32be4a39ffde23b2158285c5d3722e23cdcd55bf829
  • python-2.6.6-70.el6.tuxcare.els31.x86_64.rpm
    sha:68af1956287371a8a429ee1561169dd4b97876a65cc023514e0bd6930fb5e76f
  • python-devel-2.6.6-70.el6.tuxcare.els31.i686.rpm
    sha:f26aa579db28d9626021e64baf3ac48211646ef7a1b4e84c484a4e554764b776
  • python-devel-2.6.6-70.el6.tuxcare.els31.x86_64.rpm
    sha:081f91057dd6720b72267ed807bae283ad7f67880688410cea2487c5c10406f3
  • python-libs-2.6.6-70.el6.tuxcare.els31.i686.rpm
    sha:0d40ef71e259f935fa9e096e802017c650914f5c5894331d7a50fa78b7b82c90
  • python-libs-2.6.6-70.el6.tuxcare.els31.x86_64.rpm
    sha:254d41c9bfef4d947176a9475facfe0ddc34cae8e9419a309fbe379ccaa8d84f
  • python-test-2.6.6-70.el6.tuxcare.els31.i686.rpm
    sha:3775979fc21871367f0a570b088e6d5b0b856b470c94eb0cb17cc5b2297b1868
  • python-test-2.6.6-70.el6.tuxcare.els31.x86_64.rpm
    sha:6fef8b1a7c0a34b69b1657632f9bdb0e30565e613a2be3f4f5a056bcf7741990
  • python-tools-2.6.6-70.el6.tuxcare.els31.i686.rpm
    sha:bf72e68553c9fa55d51e5d3579ade383c9d2a3ebb008344fb6e75d52ed2de265
  • python-tools-2.6.6-70.el6.tuxcare.els31.x86_64.rpm
    sha:1fe459331a245ef28ca023008b6199c85dd6e391e24141d047883c8067534710
  • tkinter-2.6.6-70.el6.tuxcare.els31.i686.rpm
    sha:c7a40e8898ef86692e51626c03d834ba5db4ecab60ffc9c9116aaea38973f178
  • tkinter-2.6.6-70.el6.tuxcare.els31.x86_64.rpm
    sha:d6d7cb94a31f639347b3cafc7db0c35575bb8e3c368862e80f424880d4acb4f2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.