[CLSA-2026:1790786817] alt-python36: Fix of 2 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-09-30 16:47:11 UTC
Description:
- CVE-2026-15806: scope urllib HTTPPasswordMgr credentials by URL scheme so https credentials are not sent over http. - CVE-2026-17084: pin post-Unicode-3.2.0 case mappings in stringprep's b3_exceptions so the idna codec follows RFC 3454.
CVEs fixed:
Updated packages:
  • alt-python36-3.6.15-39.el9.x86_64.rpm
    sha:ef93d5b5f70bab5bff5ffe1d90eca17574645219c314dd8ac4fd2d417e69d3d6
  • alt-python36-debug-3.6.15-39.el9.x86_64.rpm
    sha:1a89d95a3808ce8b702910b49cec4292a52f66eb0d3102923048bee549b0cf63
  • alt-python36-devel-3.6.15-39.el9.x86_64.rpm
    sha:b2641d2f05f32cb9b500e63f09e526350acd92d3c6263b92f05edf6981f2b5dd
  • alt-python36-libs-3.6.15-39.el9.x86_64.rpm
    sha:a9280c7f1a7d5ac7c63442debebda874bfd6f867a77604a780e7b47bd5a4f93c
  • alt-python36-test-3.6.15-39.el9.x86_64.rpm
    sha:302ca384590836395001fbe99ef7b5e96619ec500fa6b474066018b76b5a420b
  • alt-python36-tkinter-3.6.15-39.el9.x86_64.rpm
    sha:6d62ae69b56212f5ed3aa758e92c79aece1341348d013be704b939a531f12825
  • alt-python36-tools-3.6.15-39.el9.x86_64.rpm
    sha:6f6c6eb4d26c2f64de9f41d3959bbbcf15858fccd5aa6cef05b883682c315b06
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.