[CLSA-2026:1788943518] alt-python313-setuptools: Fix of CVE-2026-59890
Type:
security
Severity:
Moderate
Release date:
2026-09-09 08:45:30 UTC
Description:
- CVE-2026-59890: normalize the Unicode form of both the MANIFEST.in pattern and the walked path before matching, so an exclude/global-exclude/ recursive-exclude/prune rule can no longer be bypassed by an NFC/NFD mismatch and leak the excluded file into the sdist
CVEs fixed:
Updated packages:
  • alt-python313-setuptools-69.0.2-5.el7.noarch.rpm
    sha:bb471a0ccb43e718a0033986a6862063cea93a3ecc4082d1ee5de9ce2faf3736
  • alt-python313-setuptools-wheel-69.0.2-5.el7.noarch.rpm
    sha:2e3505daa8017a0975365ac363dde806adad9de96ba0afd2a195594b9517173c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.