Release date:
2026-09-02 08:29:03 UTC
Description:
* SECURITY UPDATE: control-character command injection in poplib
- debian/patches/00475-CVE-2025-15367-poplib-reject-control-chars.patch:
reject C0 control characters and DEL in POP3._putcmd() so a CR/LF in a
user()/pass_() argument cannot inject a second POP3 command (CWE-77/CWE-93).
- CVE-2025-15367
Updated packages:
-
alt-python313_3.13.15-3_amd64.deb
sha:a04a488774a907ebedca6896a8665257db7fc552
-
alt-python313-debug_3.13.15-3_amd64.deb
sha:875d6d024c932b7e38c0fc83b728d5f5a12b475c
-
alt-python313-devel_3.13.15-3_amd64.deb
sha:b02300abc7e73c07749559604278e647caa66573
-
alt-python313-idle_3.13.15-3_amd64.deb
sha:c9acb7fd491d7275d6c2085b6fcfc9d522f8249e
-
alt-python313-libs_3.13.15-3_amd64.deb
sha:da6a96e6da499333cc44eaa909b1c74cdd8616a5
-
alt-python313-test_3.13.15-3_amd64.deb
sha:c5151567cc673b43c3fcab0a70d3346df14948cc
-
alt-python313-tkinter_3.13.15-3_amd64.deb
sha:3c36fe3d35653c5edfbe6fa45519ee2f7a4f71d2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
