[CLSA-2026:1790776050] alt-python314: Fix of 2 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-09-30 13:47:43 UTC
Description:
- CVE-2026-15806: urllib: scope HTTPPasswordMgr credentials by URL scheme so https credentials are not sent over http. - CVE-2026-17084: stringprep: pin post-Unicode-3.2.0 case mappings in b3_exceptions so the idna codec follows RFC 3454.
CVEs fixed:
Updated packages:
  • alt-python314-3.14.7-3.el8.x86_64.rpm
    sha:308ecff2e512f2e1098e814cfe62dbf217c29ea7d5219399e73b1d50d521a90b
  • alt-python314-debug-3.14.7-3.el8.x86_64.rpm
    sha:45d841b7051a61f44cd1c28a155e17d40b7e5f72404520eee8a8d2ab893e7a43
  • alt-python314-devel-3.14.7-3.el8.x86_64.rpm
    sha:849ebac76722079575e2c9d25b810c54121052d04496ffcc8d4678d59fc41a8d
  • alt-python314-idle-3.14.7-3.el8.x86_64.rpm
    sha:929a32106e301c8cf61881fcecf5cb7eb46647dd3de0713d4a73fb9aed9cc0bf
  • alt-python314-libs-3.14.7-3.el8.x86_64.rpm
    sha:1890e2d83fa69af48277ee589773185d4c36a917dfdfaccedd88188901a684ef
  • alt-python314-test-3.14.7-3.el8.x86_64.rpm
    sha:0f681df1cc2c52439b7c72058c9e4e7b0053427495a3c5a0540c1e3533d93a86
  • alt-python314-tkinter-3.14.7-3.el8.x86_64.rpm
    sha:fbfa043e0e49f40e46e7157316285246c20c2482c4d5d00ae302bc5948fd073e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.