[CLSA-2026:1784306201] Fix of 35 CVEs

Type:

security

Severity:

Critical

Release date:

2026-07-21 16:30:49 UTC

Description:

   * Fix build on Ubuntu 24.04 (noble): drop the libmpdec-dev build
     dependency there (it was removed from noble) and fall back to the
     bundled _decimal, matching the existing Debian >= 11 handling.
     - buildsys-pre-build: unset the MPDEC flag for Ubuntu >= 24 as well as
       Debian >= 11; bionic/jammy still use system libmpdec.
   * Skip the expat reparse-deferral tests on Ubuntu 22.04 (jammy): its
     system expat carries the 2.6 reparse-deferral backport but still
     reports an older version, so the version-gated test_xml_etree tests
     (test_flush_reparse_deferral_disabled, test_simple_xml_chunk_1/_5) fail.
     - buildsys-pre-build: set the XMLREPARSE flag for Ubuntu 22.04.
     - debian/rules: under XMLREPARSE, apply 06002 and 06004 (the same test
       removals already applied in the RPM/Alpine builds). bionic/noble are
       unaffected.

CVEs fixed:

CVE-2024-11168
CVE-2024-12718
CVE-2024-9287
CVE-2025-0938
CVE-2025-11468
CVE-2025-12084
CVE-2025-13462
CVE-2025-13836
CVE-2025-13837
CVE-2025-15282
CVE-2025-15366
CVE-2025-15367
CVE-2025-1795
CVE-2025-4138
CVE-2025-4330
CVE-2025-4435
CVE-2025-4516
CVE-2025-4517
CVE-2025-6069
CVE-2025-6075
CVE-2025-8194
CVE-2025-8291
CVE-2026-0672
CVE-2026-0865
CVE-2026-1299
CVE-2026-1502
CVE-2026-3446
CVE-2026-3644
CVE-2026-4224
CVE-2026-4519
CVE-2026-6019
CVE-2026-6100
CVE-2026-7210
CVE-2026-8328
CVE-2026-9669

Updated packages:

alt-python38_3.8.20-22_amd64.deb
sha:7a4f4dfb5a76357a11a61edab8ca51ca028eecd5
alt-python38-debug_3.8.20-22_amd64.deb
sha:5816663538bff5ce5744bd5ee12fc2acf46fa018
alt-python38-devel_3.8.20-22_amd64.deb
sha:e2e417e712c27a29b47046a859888a0e563005a9
alt-python38-idle_3.8.20-22_amd64.deb
sha:ae91f286e3bbf4f7b9eb3676ac7afe13008211f9
alt-python38-libs_3.8.20-22_amd64.deb
sha:1001c6db6caca4ff3dc504e9b209b39a5d3373e1
alt-python38-test_3.8.20-22_amd64.deb
sha:30ae96d8ffac1348aa4989644a4463d087cbdca4
alt-python38-tkinter_3.8.20-22_amd64.deb
sha:1e78ffffa1febe4e25b08e197ca90c500f4f30da
alt-python38_3.8.20-22_arm64.deb
sha:9ab79ca2da067011da74d9e30afd23905c8e3189
alt-python38-debug_3.8.20-22_arm64.deb
sha:9aed16b235241939baeba4ca4dbef1808c329c48
alt-python38-devel_3.8.20-22_arm64.deb
sha:1bfc32617033f817f6c5b059aa1928a11d4770ec
alt-python38-idle_3.8.20-22_arm64.deb
sha:78fcb8253c6a0e6f56e850784547659327d21da5
alt-python38-libs_3.8.20-22_arm64.deb
sha:1fb5ee948cab4a0096bb625f288f6c220dd66822
alt-python38-test_3.8.20-22_arm64.deb
sha:fca4fb5603d2b198c08935b44159de2bb801dfc6
alt-python38-tkinter_3.8.20-22_arm64.deb
sha:85d56caa731146f1ed0b1def97d85bc53604eac0

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.