[CLSA-2026:1777478454] Fix CVE(s): CVE-2026-6100

Type:

security

Severity:

Critical

Release date:

2026-04-30 22:47:00 UTC

Description:

   * SECURITY UPDATE: use-after-free in
     BZ2Decompressor when MemoryError is raised in the C-level
     decompress() helper
     - debian/patches/CVE-2026-6100.patch: defensively null
       bzs->next_in on the error: path of BZ2Decomp_decompress in
       Modules/bz2module.c.
     - CVE-2026-6100

Updated packages:

alt-python27_2.7.18-16_amd64.deb
sha:e428a817ded1944fa4a36a2ace477329d06cc786
alt-python27-debug_2.7.18-16_amd64.deb
sha:5af05786e52908a3fb20db21d6bf3039a25e4654
alt-python27-devel_2.7.18-16_amd64.deb
sha:accedb84985a9746f4ec28e56f729ef33a12ea88
alt-python27-idle_2.7.18-16_amd64.deb
sha:a9632ef8cccef90836a01ed5dbfee82cd4683951
alt-python27-libs_2.7.18-16_amd64.deb
sha:8f1bfaa6ddaa2402d765caff9a7d8f767f73afe8
alt-python27-test_2.7.18-16_amd64.deb
sha:df563a39c84d9caaf8311e425739406406f44573
alt-python27-tkinter_2.7.18-16_amd64.deb
sha:65e54a0a963a6a0162eb965b421d1a275f845eb6
alt-python27-tools_2.7.18-16_amd64.deb
sha:e6bd3f0873b391b92ab342f27258b0733650579e

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.