CLSA-2026-1789992787

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1789992787.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1789992787
Upstream
CVE (2)
Published
2026-09-21T12:13:19Z
Modified
2026-10-26T09:31:44Z
Summary
python2: Fix of 2 CVEs
Details
  • CVE-2026-11972: break out of the block loop in tarfile._Stream.seek as soon as read() returns no data, so a member header declaring a huge size can no longer keep a stream-mode archive spinning until it is interrupted
  • CVE-2026-9669: latch the libbz2 error code in BZ2Decomp_decompress and raise ValueError on any later call, so a BZ2Decompressor cannot be re-entered after a decompression error and write outside its output buffer; the same error is latched on BZ2FileObject through the new Util_BzRead wrapper, so a BZ2File whose stream already errored re-reports that IOError on every later read instead of re-entering BZ2_bzDecompress
References

Affected packages

TuxCare:CentOS:8.4
python2

Package

Name
python2
Purl
pkg:rpm/tuxcare/python2?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2571+890116ba.tuxcare.els28

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1789992787.json"
python2-debug

Package

Name
python2-debug
Purl
pkg:rpm/tuxcare/python2-debug?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2571+890116ba.tuxcare.els28

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1789992787.json"
python2-devel

Package

Name
python2-devel
Purl
pkg:rpm/tuxcare/python2-devel?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2571+890116ba.tuxcare.els28

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1789992787.json"
python2-libs

Package

Name
python2-libs
Purl
pkg:rpm/tuxcare/python2-libs?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2571+890116ba.tuxcare.els28

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1789992787.json"
python2-test

Package

Name
python2-test
Purl
pkg:rpm/tuxcare/python2-test?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2571+890116ba.tuxcare.els28

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1789992787.json"
python2-tkinter

Package

Name
python2-tkinter
Purl
pkg:rpm/tuxcare/python2-tkinter?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2571+890116ba.tuxcare.els28

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1789992787.json"
python2-tools

Package

Name
python2-tools
Purl
pkg:rpm/tuxcare/python2-tools?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2571+890116ba.tuxcare.els28

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1789992787.json"