Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-9669: bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data. CVE-2026-8328: The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host addresses with the actual peer address (getpeername()[0]), ftpcp() still calls parse227() directly and passes the raw attacker-controllable IP address and port to target.sendport(). This patch is related to CVE-2021-4189. CVE-2026-7774: tarfile.data_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() to write files outside the destination directory, subject to the permissions of the extracting process. CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch. CVE-2026-3276: unicodedata.normalize() can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canonical Combining Class values. This affects all normalization forms. CVE-2026-1502: CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. CVE-2026-11940: tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself. The extraction fallback validated the symlink at it's archived location but recreated it at the hardlink's shallower path, letting a relative target the filter judged contained escape the destination directory. This allowed a malicious tar archive to create a symlink pointing outside the destination, enabling out-of-destination file reads or writes. This was an incomplete fix of CVE-2025-4330.
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | python3.13 | 0:3.13.14-1.amzn2023.0.1 |
| Amazon Linux · 2023 | python3.13-debug | 0:3.13.14-1.amzn2023.0.1 |
| Amazon Linux · 2023 | python3.13-debuginfo | 0:3.13.14-1.amzn2023.0.1 |
| Amazon Linux · 2023 | python3.13-debugsource | 0:3.13.14-1.amzn2023.0.1 |
| Amazon Linux · 2023 | python3.13-devel | 0:3.13.14-1.amzn2023.0.1 |
| Amazon Linux · 2023 | python3.13-freethreading | 0:3.13.14-1.amzn2023.0.1 |
| Amazon Linux · 2023 | python3.13-freethreading-debug | 0:3.13.14-1.amzn2023.0.1 |
| Amazon Linux · 2023 | python3.13-idle | 0:3.13.14-1.amzn2023.0.1 |
| Amazon Linux · 2023 | python3.13-libs | 0:3.13.14-1.amzn2023.0.1 |
| Amazon Linux · 2023 | python3.13-test | 0:3.13.14-1.amzn2023.0.1 |
| Amazon Linux · 2023 | python3.13-tkinter | 0:3.13.14-1.amzn2023.0.1 |
Vulnerabilities 7
-
High 8.2
bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow
bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out…
-
High 7.8
tarfile extraction filter bypass allows escaping the destination directory
tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself. The extraction fallback validated the symlink at it's archived location but re…
-
Medium 6.9
tarfile.data_filter path traversal bypass allows writing outside the extraction directory
tarfile.data_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extract…
-
Medium 6.3
Potential DoS via quadratic complexity in unicodedata.normalize()
unicodedata.normalize() can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canonical Combining Class values. This affects all normalization forms.
-
Medium 6.3
The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection
`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or l…
-
Medium 5.9
FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address
The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host addresses with the actual peer address (getpeername()[0]), ftpcp() still calls parse227() directly and passes…
-
Medium 5.7
HTTP client proxy tunnel headers not validated for CR/LF
CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2026-11940.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2026-1502.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2026-3276.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2026-7210.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2026-7774.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2026-8328.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2026-9669.html