[CLSA-2026:1788946076] alt-python313-setuptools: Fix of CVE-2026-59890
Type:
security
Severity:
Moderate
Release date:
2026-09-09 09:28:07 UTC
Description:
- CVE-2026-59890: normalize the Unicode form of both the MANIFEST.in pattern and the walked path before matching, so an exclude/global-exclude/ recursive-exclude/prune rule can no longer be bypassed by an NFC/NFD mismatch and leak the excluded file into the sdist
CVEs fixed:
Updated packages:
  • alt-python313-setuptools-69.0.2-5.el8.noarch.rpm
    sha:5447abb24feb70c400f31f7735ed1166abea5b8c1844f8db01c99fd4ba3fce77
  • alt-python313-setuptools-wheel-69.0.2-5.el8.noarch.rpm
    sha:56c7d05aa5c2fa3c5eef4c473e33d5152432234a76149f9ea43517551f52f5e2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.