[CLSA-2026:1790759211] alt-python314: Fix of 2 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-09-30 09:07:03 UTC
Description:
- CVE-2026-15806: urllib: scope HTTPPasswordMgr credentials by URL scheme so https credentials are not sent over http. - CVE-2026-17084: stringprep: pin post-Unicode-3.2.0 case mappings in b3_exceptions so the idna codec follows RFC 3454.
CVEs fixed:
Updated packages:
  • alt-python314-3.14.7-3.el10.x86_64.rpm
    sha:f0dca0dccb442454de73287c3f4d5f8173063beb783aca236687aa37d2ed4766
  • alt-python314-debug-3.14.7-3.el10.x86_64.rpm
    sha:ca8ce268788b2338e379ed0199bfa0a74a5d0d48f5ac1af9bdb3c95b983d7eaf
  • alt-python314-devel-3.14.7-3.el10.x86_64.rpm
    sha:43a594eb566017b2be38d5fc2650cf66f5d2f51ec704784c8c19c1cdecc9fed7
  • alt-python314-idle-3.14.7-3.el10.x86_64.rpm
    sha:645a105d1a501099451259aeeca8767096d77b3c4595a170bf7ace756893586a
  • alt-python314-libs-3.14.7-3.el10.x86_64.rpm
    sha:5512a8d78b5a4b97ab3c2ec832b46e9c20c1e08874d017e329696eaff3c523e3
  • alt-python314-test-3.14.7-3.el10.x86_64.rpm
    sha:368b78099e48e6324adaddaf845e6d7c89f1b8a8d9bf7787250713057127ed67
  • alt-python314-tkinter-3.14.7-3.el10.x86_64.rpm
    sha:cfb0726a6b2571208bf532fe92b8eaca88789fdee0eb05e54d88f1bb66083e97
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.