[CLSA-2026:1784546192] Fix of 35 CVEs
Type:
security
Severity:
Critical
Release date:
2026-07-21 23:02:03 UTC
Description:
* Fix build on Ubuntu 24.04 (noble): drop the libmpdec-dev build dependency there (it was removed from noble) and fall back to the bundled _decimal, matching the existing Debian >= 11 handling. - buildsys-pre-build: unset the MPDEC flag for Ubuntu >= 24 as well as Debian >= 11; bionic/jammy still use system libmpdec. * Skip the expat reparse-deferral tests on Ubuntu 22.04 (jammy): its system expat carries the 2.6 reparse-deferral backport but still reports an older version, so the version-gated test_xml_etree tests (test_flush_reparse_deferral_disabled, test_simple_xml_chunk_1/_5) fail. - buildsys-pre-build: set the XMLREPARSE flag for Ubuntu 22.04. - debian/rules: under XMLREPARSE, apply 06002 and 06004 (the same test removals already applied in the RPM/Alpine builds). bionic/noble are unaffected.
Updated packages:
  • alt-python38_3.8.20-22_amd64.deb
    sha:f9980185b5f778db9ef95143a83c3da9d83a869d
  • alt-python38-debug_3.8.20-22_amd64.deb
    sha:2c3fa00de6b2b04925c29eb2db3faab82c27b683
  • alt-python38-devel_3.8.20-22_amd64.deb
    sha:ebefb46c2a39a1e52c3f6609bea0122b1228121f
  • alt-python38-idle_3.8.20-22_amd64.deb
    sha:5e93643d1f2495c9e1702b5637f9563c7eccc9f9
  • alt-python38-libs_3.8.20-22_amd64.deb
    sha:1d9aeeaa6371d976c3e92cb76c79095942b8c948
  • alt-python38-test_3.8.20-22_amd64.deb
    sha:6419dcbf58026f84396cd750e416f5e22659607e
  • alt-python38-tkinter_3.8.20-22_amd64.deb
    sha:8a72fdc0e290afea3e453702f382bb1d0586286b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.