[CLSA-2026:1784807830] alt-python39: Fix of 9 CVEs
Type:
security
Severity:
Critical
Release date:
2026-07-23 11:57:57 UTC
Description:
- el10: build _decimal against system libmpdec (BuildRequires mpdecimal-devel, configure --with-system-libmpdec, patch setup.py to link -lmpdec since el10 ships libmpdec.so.3 not .so.2, and _decimal.c uchar->unsigned char for the mpdecimal 2.5 api); the bundled libmpdec fails to compile with -Og under the el10 gcc, which broke the CL10 build - el10: apply 06003 (BIO_eof ASN1 EOF, CPython gh-100372) so test_ssl cadata tests pass with OpenSSL 3.5.x, matching the alpine build (ALTPYTH-611)
Updated packages:
  • alt-python39-3.9.23-19.el10.x86_64.rpm
    sha:fd4cfa9f838b2eea91a602e39664dc0224474f47e6e547aefccf2a57f75bd288
  • alt-python39-debug-3.9.23-19.el10.x86_64.rpm
    sha:ef88306fbd92f1161b1533bf294f4d6780635ede30e5106b5acbdd5a258a5c75
  • alt-python39-devel-3.9.23-19.el10.x86_64.rpm
    sha:54610ec12a68d0b3174de5f60f87b90b58333a4a7ef2ba7ce98b597dad0747e1
  • alt-python39-idle-3.9.23-19.el10.x86_64.rpm
    sha:9b4700017c255b7104b83c4124672ab206471e4a1b3be103e7aacf91139f5caa
  • alt-python39-libs-3.9.23-19.el10.x86_64.rpm
    sha:43ed20dcac9991bd048567950da7dff762c8c61edb05e9773ca10b9eeff68ddf
  • alt-python39-test-3.9.23-19.el10.x86_64.rpm
    sha:b71062bf9c1eb29ba1299534e268d70df7ecde30974c936352b8d899b323ec9a
  • alt-python39-tkinter-3.9.23-19.el10.x86_64.rpm
    sha:ba17459a40b15af13aa23a5401c12a420bf45f6cc1372a1f9e3c1aeecc1153c9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.