[CLSA-2026:1788347430] alt-python313: Fix of CVE-2025-15367
Type:
security
Severity:
Important
Release date:
2026-09-02 11:10:41 UTC
Description:
- CVE-2025-15367: reject control characters in poplib POP3._putcmd() so a CR/LF in a user()/pass_() argument cannot inject a second POP3 command
CVEs fixed:
Updated packages:
  • alt-python313-3.13.15-2.el9.x86_64.rpm
    sha:3582913265a23e50096f76458fd9184611111752fb36cea96b3b89c8494fd3d1
  • alt-python313-debug-3.13.15-2.el9.x86_64.rpm
    sha:3444010ef56338eafa20de9a489bceb2fc08e306453fe3737120aad631c7e783
  • alt-python313-devel-3.13.15-2.el9.x86_64.rpm
    sha:caa30f54e721a50b6251f3a6771276cc81680827a19f473d302bef763b66382c
  • alt-python313-idle-3.13.15-2.el9.x86_64.rpm
    sha:4c7d8a00ffd12facbbd15aca167d8a23c9e187e64599f91491171e42a6d2689e
  • alt-python313-libs-3.13.15-2.el9.x86_64.rpm
    sha:9335a8b050a14aab34ed1b94e243db52aa2a1833ee68269a8eb7888730439062
  • alt-python313-test-3.13.15-2.el9.x86_64.rpm
    sha:f51bcb6e3521cbba91678cfce755d41c042ec113e6195b3215f5b22bfa57d238
  • alt-python313-tkinter-3.13.15-2.el9.x86_64.rpm
    sha:fcb46f9a0d70126d56daa1330dc9bd1578710a260df2afe64ac6da8845f6c6d4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.