[CLSA-2026:1788186394] alt-python312: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-08-31 17:34:53 UTC
Description:
- CVE-2026-3446: base64 decoder silently discarded data after the first padded quad in binascii.a2b_base64(), which backs base64.b64decode()
CVEs fixed:
Updated packages:
  • alt-python312-3.12.14-2.el10.x86_64.rpm
    sha:65b0d304c60a9efd3bd48fe6c8714bb60ae2d9a5b797d3d51e0097843ba0e55b
  • alt-python312-debug-3.12.14-2.el10.x86_64.rpm
    sha:fb662ddd55107df26147e1af0e29337d8256bd2b59151b79fae620fb8dbb494d
  • alt-python312-devel-3.12.14-2.el10.x86_64.rpm
    sha:98ca900e8839a5e1c960334a97225fb46fed6bd19a0ee2c5858b1acaaece9840
  • alt-python312-idle-3.12.14-2.el10.x86_64.rpm
    sha:794ac3783f60d380e33a1abdf598dc1125bed7c05c8311154c74f8a104f17937
  • alt-python312-libs-3.12.14-2.el10.x86_64.rpm
    sha:2935f466c6d3d0af9397a38fed81303bf0b019455aaf9ae6830432ae2665b932
  • alt-python312-test-3.12.14-2.el10.x86_64.rpm
    sha:8eb29c58e2d7dfbf447b47dfee7c84ce152ed3521f229a563c9ae461a22a259a
  • alt-python312-tkinter-3.12.14-2.el10.x86_64.rpm
    sha:8086fa3627874a21e542c5817ea124d410a720ea3c85ebccab4daa6c08cb0645
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.