[CLSA-2026:1784811076] Fix of 5 CVEs
Type:
security
Severity:
None
Release date:
2026-07-23 17:16:25 UTC
Description:
* SECURITY UPDATE: reject control characters in imaplib IMAP4 commands - debian/patches/CVE-2025-15366.patch: guard IMAP4._command() - CVE-2025-15366 * SECURITY UPDATE: reject control characters in poplib POP3 commands - debian/patches/CVE-2025-15367.patch: guard POP3._putcmd() - CVE-2025-15367 * SECURITY UPDATE: control-character injection via http.cookies paths - debian/patches/CVE-2026-3644.patch: guard Morsel.update()/|=/unpickle/js_output - CVE-2026-3644 * SECURITY UPDATE: uncontrolled recursion in pyexpat content model - debian/patches/CVE-2026-4224.patch: recursion guard in conv_content_model() - CVE-2026-4224 * SECURITY UPDATE: webbrowser argument injection via leading-dash URL - debian/patches/CVE-2026-4519.patch: reject URLs starting with '-' - CVE-2026-4519
Updated packages:
  • alt-python310_3.10.20-3_amd64.deb
    sha:54d3c8a463dfc6e3e7d93a1e1259bdf8bac84704
  • alt-python310-debug_3.10.20-3_amd64.deb
    sha:10a4dec539b3445d8ec9edb7bd49bab82c98b189
  • alt-python310-devel_3.10.20-3_amd64.deb
    sha:d7b5d5fe4b16d6f8f12e1d5a804b9fb4aaeded6b
  • alt-python310-idle_3.10.20-3_amd64.deb
    sha:40d1675d32d25c618b88c9b591d518fd7d1bc3a4
  • alt-python310-libs_3.10.20-3_amd64.deb
    sha:7beaf203a79526cdab79ba094eeb391b557b103b
  • alt-python310-test_3.10.20-3_amd64.deb
    sha:eb77e729ae7ace60044e3bde8a06ab19197a1d20
  • alt-python310-tkinter_3.10.20-3_amd64.deb
    sha:c862a29843286026ec899a174c58f6d470a24e11
  • alt-python310_3.10.20-3_arm64.deb
    sha:cb47f361cc5a159e52212084d6128b4fe3e909c6
  • alt-python310-debug_3.10.20-3_arm64.deb
    sha:96039fce649f909ba4a26e935f7b2b57001841b9
  • alt-python310-devel_3.10.20-3_arm64.deb
    sha:ae2fdda1a8be75bfd5d5377153ff7c0882400acb
  • alt-python310-idle_3.10.20-3_arm64.deb
    sha:0cabe54bd156221755130227a54bd854c5c0abc4
  • alt-python310-libs_3.10.20-3_arm64.deb
    sha:46c51fd310b222b6a371434b2319d0342e2ec832
  • alt-python310-test_3.10.20-3_arm64.deb
    sha:90a8f66041dc4cc9f788bd6274d2f74a4bfecb88
  • alt-python310-tkinter_3.10.20-3_arm64.deb
    sha:d4c119a71e9f4e26df0cdb1bbad5ee3203304b98
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.