[CLSA-2026:1788338010] alt-python313: Fix of CVE-2025-15367
Type:
security
Severity:
Important
Release date:
2026-09-02 08:33:41 UTC
Description:
- CVE-2025-15367: reject control characters in poplib POP3._putcmd() so a CR/LF in a user()/pass_() argument cannot inject a second POP3 command
CVEs fixed:
Updated packages:
  • alt-python313-3.13.15-2.el7.x86_64.rpm
    sha:bac1189bcb2b7b539e045746aa94d5189babf34ba43ac94aa312e3c98b057f25
  • alt-python313-debug-3.13.15-2.el7.x86_64.rpm
    sha:d2e2c6a71c78391549197f5ad9805010d68ff1b4ad4daf061a48d879566f7cec
  • alt-python313-devel-3.13.15-2.el7.x86_64.rpm
    sha:5dee61c11802a27e3ef4b4d346523c6d21249d1b453fe7770dcf0eb20e081d21
  • alt-python313-idle-3.13.15-2.el7.x86_64.rpm
    sha:aaac291a92150d30775a7a00f3e06a032458751924001585e7d8bfcae7c48925
  • alt-python313-libs-3.13.15-2.el7.x86_64.rpm
    sha:c641cdf36f968c66f6fb60367a923ceeda8ed7dbc75d6d2f61583b001d56c701
  • alt-python313-test-3.13.15-2.el7.x86_64.rpm
    sha:64539b460acaad931463a950c466bba71d300aa64811981487b43797164a424b
  • alt-python313-tkinter-3.13.15-2.el7.x86_64.rpm
    sha:69122eaf33ed6f4dde442d0568632e649170da6c58da9b5c898b03a32f2dd0fd
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.