[CLSA-2026:1788346292] alt-python313: Fix of CVE-2025-15367
Type:
security
Severity:
Important
Release date:
2026-09-02 10:51:44 UTC
Description:
- CVE-2025-15367: reject control characters in poplib POP3._putcmd() so a CR/LF in a user()/pass_() argument cannot inject a second POP3 command
CVEs fixed:
Updated packages:
  • alt-python313-3.13.15-2.el8.x86_64.rpm
    sha:86d72e0341435ea2dea352cc6bc1c60d104ebaec2f5afb3e19b2ed98dca77ba2
  • alt-python313-debug-3.13.15-2.el8.x86_64.rpm
    sha:94f02ab9f0792978a504e45094b1a44dcb5cb93b601a435a6af77f3e6183a172
  • alt-python313-devel-3.13.15-2.el8.x86_64.rpm
    sha:76c02adea350e5c9f84737881a2ed7b04ce3ab4878323915412f01fb8a672473
  • alt-python313-idle-3.13.15-2.el8.x86_64.rpm
    sha:06f3a68d891e552e261ae7b89366cc5bffe120dfd4346c44a7472d580a93fd39
  • alt-python313-libs-3.13.15-2.el8.x86_64.rpm
    sha:c15c85795e7b3f8e8d0ce90d3e2875b3f79840396d68569ef030fd75fccc815f
  • alt-python313-test-3.13.15-2.el8.x86_64.rpm
    sha:46fa5d2156e46041b4f372bc0846da095e1f677628ea69e627d7e9abe80e4a8e
  • alt-python313-tkinter-3.13.15-2.el8.x86_64.rpm
    sha:c4349aefedd1747c0c8537d123ae8c0dadc1bf16a1df900ebb14a71a39da2453
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.