[CLSA-2026:1790758445] alt-python313: Fix of 2 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-09-30 08:54:18 UTC
Description:
- CVE-2026-15806: scope urllib.request HTTPPasswordMgr credentials by URL scheme so credentials registered for https:// are not sent over http://. - CVE-2026-17084: regenerate Lib/stringprep.py so the idna codec no longer applies case mappings from outside Unicode 3.2.0.
CVEs fixed:
Updated packages:
  • alt-python313-3.13.15-5.el7.x86_64.rpm
    sha:c7a4d2ea86ffef460b4ffd0ebeedc5a82228a48c67555487469590854c3eef73
  • alt-python313-debug-3.13.15-5.el7.x86_64.rpm
    sha:9894fd2110d36c9ee04d0c00fda8fc4ccfbde745392ac51c9eb40e818f96a9da
  • alt-python313-devel-3.13.15-5.el7.x86_64.rpm
    sha:c4adbf66bc8c8d9eb64a7e5b96d31291a51f73a7263848ace75e1eafd01b1a9c
  • alt-python313-idle-3.13.15-5.el7.x86_64.rpm
    sha:de12107a0e22791a6727844fe78d4e146241a264ba09d1ee7c40fcdf63b2d22c
  • alt-python313-libs-3.13.15-5.el7.x86_64.rpm
    sha:fd4e5d4a71ce9da47d839983e3b2502b212ce5ebeb32b1734bb7aba79ecd300a
  • alt-python313-test-3.13.15-5.el7.x86_64.rpm
    sha:6e8c83e5087c48c3e7fcd01e00c0bc55aab5ec3dc65047f94e8b5dcf80907e0f
  • alt-python313-tkinter-3.13.15-5.el7.x86_64.rpm
    sha:caaa6df11f4bd4483a84b27e40384d4dd55bb0410f0253319653e7d37c3368a4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.