[CLSA-2026:1784822303] Fix of 5 CVEs
Type:
security
Severity:
None
Release date:
2026-07-23 20:18:02 UTC
Description:
* SECURITY UPDATE: reject control characters in imaplib IMAP4 commands - debian/patches/CVE-2025-15366.patch: guard IMAP4._command() - CVE-2025-15366 * SECURITY UPDATE: reject control characters in poplib POP3 commands - debian/patches/CVE-2025-15367.patch: guard POP3._putcmd() - CVE-2025-15367 * SECURITY UPDATE: control-character injection via http.cookies paths - debian/patches/CVE-2026-3644.patch: guard Morsel.update()/|=/unpickle/js_output - CVE-2026-3644 * SECURITY UPDATE: uncontrolled recursion in pyexpat content model - debian/patches/CVE-2026-4224.patch: recursion guard in conv_content_model() - CVE-2026-4224 * SECURITY UPDATE: webbrowser argument injection via leading-dash URL - debian/patches/CVE-2026-4519.patch: reject URLs starting with '-' - CVE-2026-4519
Updated packages:
  • alt-python310_3.10.20-3_amd64.deb
    sha:91728edeccaae0db78c66ab20781483f698011dd
  • alt-python310-debug_3.10.20-3_amd64.deb
    sha:10a4dec539b3445d8ec9edb7bd49bab82c98b189
  • alt-python310-devel_3.10.20-3_amd64.deb
    sha:05293bfd918f108c63e8057c9fecbc9cebdd2ea5
  • alt-python310-idle_3.10.20-3_amd64.deb
    sha:faac8925980102ac5daba0357ca3fa7b97b7286d
  • alt-python310-libs_3.10.20-3_amd64.deb
    sha:996934fcb9a66b24359535d5b96db4a3c0c4c861
  • alt-python310-test_3.10.20-3_amd64.deb
    sha:3202961121ff074b5618493e638c08f09b7ace16
  • alt-python310-tkinter_3.10.20-3_amd64.deb
    sha:76125bae96fe79e74a7764c944251be2cbe7f77c
  • alt-python310_3.10.20-3_arm64.deb
    sha:8c921778d02487a87568bdfac4485514dba8fa6e
  • alt-python310-debug_3.10.20-3_arm64.deb
    sha:96039fce649f909ba4a26e935f7b2b57001841b9
  • alt-python310-devel_3.10.20-3_arm64.deb
    sha:d21c9dd6144cde43a2a331adf41566bee1b0c94c
  • alt-python310-idle_3.10.20-3_arm64.deb
    sha:c5b6e5a68179547a4c09fea59dfed1e9fb25b400
  • alt-python310-libs_3.10.20-3_arm64.deb
    sha:fe043e38d3912b9707bc4d4b45b67b1f680d2a61
  • alt-python310-test_3.10.20-3_arm64.deb
    sha:3dea278caaf1feff32e2760dfebbf9ba5771544a
  • alt-python310-tkinter_3.10.20-3_arm64.deb
    sha:547941301a1a587294989a7a529cd83073a784c8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.