[CLSA-2026:1785148546] alt-python36-setuptools: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-27 10:35:57 UTC
Description:
- CVE-2022-40897: regex denial of service via crafted HTML in package_index - CVE-2024-6345: remote code execution via command injection in VCS download functions - CVE-2025-47273: path traversal in PackageIndex download filename resolution
Updated packages:
  • alt-python36-setuptools-38.5.2-9.el8.noarch.rpm
    sha:6753bcc2da3a024d105539396c8c059ea100f76f3363002beac0c4f7ab14fe81
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.