rpms/python3.9
7
0
Fork 0
Code Issues Pull Requests Releases Activity
Version 3.9 of the Python interpreter
81 Commits 4 Branches 41 Tags 3 MiB
Python 100%
6c30a5bfd1
Go to file
RHEL Packaging Agent 6c30a5bfd1 Fix CVE-2026-11940: symlink escape via tarfile hardlink fallback 
Security fix for CVE-2026-11940: Fix symlink escape via tarfile
hardlink-extraction fallback. The patch adds a filter check on the
hardlink target name before extraction to prevent symlink escapes.
The test decorator was adapted from upstream's @symlink_test to
@support.skip_unless_symlink for Python 3.9 compatibility.

CVE: CVE-2026-11940
Upstream patches:
 - 27dd970bf6.patch
Resolves: RHEL-227223

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-14 09:32:19 +02:00
tests CI: Install EPEL packages first 2026-04-22 12:05:02 +02:00
.gitignore RHEL 9.0.0 Alpha bootstrap 2020-10-21 14:49:50 -07:00
00001-rpath.patch Update to 3.9.8 2021-11-08 13:58:30 +01:00
00111-no-static-lib.patch Update to 3.9.8 2021-11-08 13:58:30 +01:00
00189-use-rpm-wheels.patch Update to Python 3.9.24 2025-11-21 15:46:49 +01:00
00251-change-user-install-location.patch Sync patch 251 with Python 3.10+ on Fedora < 36 2022-01-14 12:42:43 +01:00
00328-pyc-timestamp-invalidation-mode.patch RHEL 9.0.0 Alpha bootstrap 2020-10-21 14:49:50 -07:00
00329-fips.patch Enable importing of hash-based .pyc files under FIPS mode 2024-06-11 23:07:26 +02:00
00353-architecture-names-upstream-downstream.patch Update to 3.9.6 2021-06-29 16:24:40 +02:00
00397-tarfile-filter.patch Update to Python 3.9.25 2025-11-21 15:46:49 +01:00
00415-cve-2023-27043-gh-102988-reject-malformed-addresses-in-email-parseaddr-111116.patch Update to 3.9.20 2024-09-19 02:28:08 +02:00
00422-fix-tests-for-xmlpullparser-with-expat-2-6-0.patch Update to 3.9.19 2024-05-10 01:05:58 +02:00
00471-cve-2025-12084.patch Security fix for CVE-2025-12084 2026-01-15 14:52:52 +01:00
00473-cve-2026-0865.patch Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 2026-02-26 15:08:41 +01:00
00474-cve-2025-15366.patch Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 2026-02-26 15:08:41 +01:00
00475-cve-2025-15367.patch Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 2026-02-26 15:08:41 +01:00
00476-cve-2026-1299.patch Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 2026-02-26 15:08:41 +01:00
00478-cve-2026-4519.patch Security fix for CVE-2026-4519 2026-03-26 12:08:45 +01:00
00480-cve-2026-4786.patch Security fixes for CVE-2026-4786 and CVE-2026-6100 2026-04-17 05:04:09 +02:00
00482-cve-2026-6100.patch Security fixes for CVE-2026-4786 and CVE-2026-6100 2026-04-17 05:04:09 +02:00
00489-openssl-3.5.7.patch Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ 2026-07-07 17:08:34 +02:00
00490-cve-2026-15308.patch Security fix for CVE-2026-15308 2026-07-16 16:05:03 +02:00
00492-cve-2026-11940.patch Fix CVE-2026-11940: symlink escape via tarfile hardlink fallback 2026-08-14 09:32:19 +02:00
check-pyc-timestamps.py RHEL 9.0.0 Alpha bootstrap 2020-10-21 14:49:50 -07:00
gating.yaml Gate on STI tests 2021-07-15 14:41:00 +00:00
idle3.appdata.xml RHEL 9.0.0 Alpha bootstrap 2020-10-21 14:49:50 -07:00
idle3.desktop RHEL 9.0.0 Alpha bootstrap 2020-10-21 14:49:50 -07:00
pubkeys.txt RHEL 9.0.0 Alpha bootstrap 2020-10-21 14:49:50 -07:00
python3.9.rpmlintrc RHEL 9.0.0 Alpha bootstrap 2020-10-21 14:49:50 -07:00
python3.9.spec Fix CVE-2026-11940: symlink escape via tarfile hardlink fallback 2026-08-14 09:32:19 +02:00
rpminspect.yaml rpminspect: Ignore the debuginfo check for libpython 2023-07-11 17:41:17 +02:00
sources Update to Python 3.9.25 2025-11-21 15:46:49 +01:00