[CLSA-2026:1790781421] alt-python313: Fix of 2 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-09-30 15:17:15 UTC
Description:
- CVE-2026-15806: scope urllib.request HTTPPasswordMgr credentials by URL scheme so credentials registered for https:// are not sent over http://. - CVE-2026-17084: regenerate Lib/stringprep.py so the idna codec no longer applies case mappings from outside Unicode 3.2.0.
CVEs fixed:
Updated packages:
  • alt-python313-3.13.15-5.el8.x86_64.rpm
    sha:5237f1dd580fc91e1e308afe9de8973f575a542a08b75c01e12f78542f404ab0
  • alt-python313-debug-3.13.15-5.el8.x86_64.rpm
    sha:cac948ddb3288c6b8ba69be05f99df92c7c5d061a5c394d4db5c2e0428f96a09
  • alt-python313-devel-3.13.15-5.el8.x86_64.rpm
    sha:84947f3506938696f62b8d86b61a9fc94266c0bd8a6bd227c15f7d591e185271
  • alt-python313-idle-3.13.15-5.el8.x86_64.rpm
    sha:9bbf77de17b3c2d1c8d9fe9039db39a24f270b52719c111dde318b15ece6eb08
  • alt-python313-libs-3.13.15-5.el8.x86_64.rpm
    sha:cda276ba3d3cf9f39c18e3c0083a02ba1d20c8bf90668bceceddaa6019a6d4d3
  • alt-python313-test-3.13.15-5.el8.x86_64.rpm
    sha:03a67bd6b667a68effd678200cf947b3915f8844efb65f775222d327a9d213b7
  • alt-python313-tkinter-3.13.15-5.el8.x86_64.rpm
    sha:b7a9ad3ad1ad287c75389eac78c7e69a36fe72f2c7125a4b4059de5aa4774f10
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.