[CLSA-2026:1784299966] Fix of 35 CVEs
Type:
security
Severity:
Critical
Release date:
2026-07-21 16:50:10 UTC
Description:
* Fix build on Ubuntu 24.04 (noble): drop the libmpdec-dev build dependency there (it was removed from noble) and fall back to the bundled _decimal, matching the existing Debian >= 11 handling. - buildsys-pre-build: unset the MPDEC flag for Ubuntu >= 24 as well as Debian >= 11; bionic/jammy still use system libmpdec. * Skip the expat reparse-deferral tests on Ubuntu 22.04 (jammy): its system expat carries the 2.6 reparse-deferral backport but still reports an older version, so the version-gated test_xml_etree tests (test_flush_reparse_deferral_disabled, test_simple_xml_chunk_1/_5) fail. - buildsys-pre-build: set the XMLREPARSE flag for Ubuntu 22.04. - debian/rules: under XMLREPARSE, apply 06002 and 06004 (the same test removals already applied in the RPM/Alpine builds). bionic/noble are unaffected.
Updated packages:
  • alt-python38_3.8.20-22_amd64.deb
    sha:9315a5d6bfc915b0b747c26d1c4d58ea7cfa8b3d
  • alt-python38-debug_3.8.20-22_amd64.deb
    sha:cf0bbcafbc4f913c08ecb2265dfa7307fa82cc12
  • alt-python38-devel_3.8.20-22_amd64.deb
    sha:c2898fa3c7a611bc06ea1b4b897dd7eddfcff443
  • alt-python38-idle_3.8.20-22_amd64.deb
    sha:5c33a0116e24a2ad5b0f3831d0be4e8f72be5f57
  • alt-python38-libs_3.8.20-22_amd64.deb
    sha:c2af1afe78a0cea1007da220bc9428a3800b7ba4
  • alt-python38-test_3.8.20-22_amd64.deb
    sha:530a60494bc600290507372c766082e751432895
  • alt-python38-tkinter_3.8.20-22_amd64.deb
    sha:41d3cca83675454f002a197c4e0dc45caab298cf
  • alt-python38_3.8.20-22_arm64.deb
    sha:b9706f3066d24ec055348f882f0a2d491d31c773
  • alt-python38-debug_3.8.20-22_arm64.deb
    sha:14e2b193c7f8ae2cc2639d0a5d578819245b2386
  • alt-python38-devel_3.8.20-22_arm64.deb
    sha:736098738ac84cfb09bb93c9083c851d1e130ae3
  • alt-python38-idle_3.8.20-22_arm64.deb
    sha:c0ce6e7275024ce25c44c6d00271d5d70f08e86d
  • alt-python38-libs_3.8.20-22_arm64.deb
    sha:e82e1a18595fe9c70dbba774ef3bf729114bd8b0
  • alt-python38-test_3.8.20-22_arm64.deb
    sha:7d28e9d0155b6f2810156f9947f7aeddec2a4abc
  • alt-python38-tkinter_3.8.20-22_arm64.deb
    sha:d70302d345cc1ac92d793b366db4b3bc69e333b0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.