[CLSA-2026:1790773138] alt-python36: Fix of 2 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-09-30 12:59:12 UTC
Description:
- CVE-2026-15806: scope urllib HTTPPasswordMgr credentials by URL scheme so https credentials are not sent over http. - CVE-2026-17084: pin post-Unicode-3.2.0 case mappings in stringprep's b3_exceptions so the idna codec follows RFC 3454.
CVEs fixed:
Updated packages:
  • alt-python36-3.6.15-39.el8.x86_64.rpm
    sha:fad1a380d21f501c0c10ccb142b83239eb3b609715c86e8bfd34f73d5dbb299e
  • alt-python36-debug-3.6.15-39.el8.x86_64.rpm
    sha:aa9924a2195c986d90aa8d93741fd2b5b05495798057f140369695af3e9ee4ab
  • alt-python36-devel-3.6.15-39.el8.x86_64.rpm
    sha:6b592eeece71833aeebc00f21f92a1a93cb3f865e65d8403b743ed64e8e60666
  • alt-python36-libs-3.6.15-39.el8.x86_64.rpm
    sha:43af9f12c6db1b26c5657c0076a8706a3eac6bc9621f5f4954cdc635f86e3770
  • alt-python36-test-3.6.15-39.el8.x86_64.rpm
    sha:5a0746e7a9f196231d8ba72cd97260a7063bffa304fb6bd6beb501de8416f8bf
  • alt-python36-tkinter-3.6.15-39.el8.x86_64.rpm
    sha:52299c2198c24003c4ee22245a1ade8c9aeb55017b2477867a24bed86207a065
  • alt-python36-tools-3.6.15-39.el8.x86_64.rpm
    sha:bb12284497a31fcf380dfa735eb96126f049da4dd7f491121592dc50ca0548b6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.