[CLSA-2026:1788291365] Fix CVE(s): CVE-2024-6345, CVE-2025-47273, CVE-2026-59890

Type:

security

Severity:

Important

Release date:

2026-09-01 19:36:18 UTC

Description:

   * SECURITY UPDATE: MANIFEST.in exclusion bypass via Unicode normalization
     - debian/patches/CVE-2026-59890.patch: normalize pattern and path to NFC
       before matching in FileList (translate_pattern)
     - CVE-2026-59890

CVEs fixed:

CVE-2024-6345
CVE-2025-47273
CVE-2026-59890

Updated packages:

alt-python37-setuptools_58.3.0-4_all.deb
sha:2531ddcb2a962c9e0e849a27678a3741af8fab68
alt-python37-setuptools-wheel_58.3.0-4_all.deb
sha:5b35fdca0cc6626bcc939924127414cdc255c076

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.