Summary
[3.6.8-78.0.1]
- Add Oracle Linux distribution in platform.py [Orabug: 20812544]
[3.6.8.openela.0]
- Add openela to supported dists
[3.6.8-78]
- Security fix for CVE-2026-11940
Resolves: RHEL-227194
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | platform-python | 0:3.6.8-78.0.1.el8_10 |
| Oracle Linux · 8 | platform-python-debug | 0:3.6.8-78.0.1.el8_10 |
| Oracle Linux · 8 | platform-python-devel | 0:3.6.8-78.0.1.el8_10 |
| Oracle Linux · 8 | python3-idle | 0:3.6.8-78.0.1.el8_10 |
| Oracle Linux · 8 | python3-libs | 0:3.6.8-78.0.1.el8_10 |
| Oracle Linux · 8 | python3-test | 0:3.6.8-78.0.1.el8_10 |
| Oracle Linux · 8 | python3-tkinter | 0:3.6.8-78.0.1.el8_10 |
Vulnerabilities 1
-
High 7.8
tarfile extraction filter bypass allows escaping the destination directory
tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself. The extraction fallback validated the symlink at it's archived location but re…