CLSA-2026-1790075259

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790075259.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1790075259
Upstream
CVE (2)
Published
2026-09-22T11:07:50Z
Modified
2026-10-26T09:30:56Z
Summary
python2: Fix of 2 CVEs
Details
  • CVE-2026-11972: break out of the block loop in tarfile._Stream.seek as soon as read() returns no data, so a member header declaring a huge size can no longer keep a stream-mode archive spinning until it is interrupted
  • CVE-2026-9669: latch the libbz2 error code in BZ2Decomp_decompress and raise ValueError on any later call, so a BZ2Decompressor cannot be re-entered after a decompression error and write outside its output buffer; the same error is latched on BZ2FileObject through the new Util_BzRead wrapper, so a BZ2File whose stream already errored re-reports that IOError on every later read instead of re-entering BZ2_bzDecompress
References

Affected packages

TuxCare:CentOS-Stream:8
python2

Package

Name
python2
Purl
pkg:rpm/tuxcare/python2?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-17.module_el8+2579+f2359962.tuxcare.els16

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790075259.json"
python2-debug

Package

Name
python2-debug
Purl
pkg:rpm/tuxcare/python2-debug?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-17.module_el8+2579+f2359962.tuxcare.els16

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790075259.json"
python2-devel

Package

Name
python2-devel
Purl
pkg:rpm/tuxcare/python2-devel?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-17.module_el8+2579+f2359962.tuxcare.els16

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790075259.json"
python2-libs

Package

Name
python2-libs
Purl
pkg:rpm/tuxcare/python2-libs?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-17.module_el8+2579+f2359962.tuxcare.els16

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790075259.json"
python2-test

Package

Name
python2-test
Purl
pkg:rpm/tuxcare/python2-test?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-17.module_el8+2579+f2359962.tuxcare.els16

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790075259.json"
python2-tkinter

Package

Name
python2-tkinter
Purl
pkg:rpm/tuxcare/python2-tkinter?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-17.module_el8+2579+f2359962.tuxcare.els16

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790075259.json"
python2-tools

Package

Name
python2-tools
Purl
pkg:rpm/tuxcare/python2-tools?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-17.module_el8+2579+f2359962.tuxcare.els16

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790075259.json"