{"id":"CLSA-2026-1791547905","summary":"Fix CVE(s): CVE-2026-41205","details":"   * SECURITY UPDATE: path traversal via //-prefixed URI in TemplateLookup\n     - debian/patches/CVE-2026-41205.patch: strip every leading / in Template()\n     - CVE-2026-41205\n   * debian/python-mako-doc.links: fix the dangling changelog symlinks","modified":"2026-10-26T09:32:04.524658007Z","published":"2026-10-09T12:11:58Z","upstream":["CVE-2026-41205"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1791547905.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41205"}],"affected":[{"package":{"name":"python-mako","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/python-mako?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7+ds1-1ubuntu0.2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791547905.json"}},{"package":{"name":"python-mako-doc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/python-mako-doc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7+ds1-1ubuntu0.2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791547905.json"}},{"package":{"name":"python3-mako","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/python3-mako?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7+ds1-1ubuntu0.2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791547905.json"}}],"schema_version":"1.9.0"}