[CLSA-2026:1793021697] Fix CVE(s): CVE-2025-15366, CVE-2025-15367
Type:
security
Severity:
Important
Release date:
2026-10-26 13:36:12 UTC
Description:
* SECURITY UPDATE: Command injection in imaplib - debian/patches/CVE-2025-15366.patch: in Lib/imaplib.py, reject NUL, CR and LF in IMAP command arguments with ValueError. Backport of upstream 6262704b134d (gh-143921) combined with its narrowing d0921efb665a (GH-153067), as in the upstream 3.13 backport: only those three characters are rejected, so other control characters that may occur in server-returned mailbox names keep working, which avoids the regression that made Debian revert the original fix in 3.9.2-1+deb11u6 - CVE-2025-15366 * SECURITY UPDATE: Command injection in poplib - debian/patches/CVE-2025-15367.patch: in Lib/poplib.py, reject C0 control characters and DEL in POP3 commands with ValueError. Backport of upstream b234a2b67539 (gh-143923) - CVE-2025-15367
CVEs fixed:
Updated packages:
  • idle-python3.9_3.9.2-1+deb11u7+tuxcare.els6_all.deb
    sha:08aaf31b21270fd2cb9ce67eea68a17082c407ac
  • libpython3.9_3.9.2-1+deb11u7+tuxcare.els6_amd64.deb
    sha:80387b2bbefdfd9fdcc5db2477d539489e17488e
  • libpython3.9-dev_3.9.2-1+deb11u7+tuxcare.els6_amd64.deb
    sha:9e3be55975ac20a8c66fd14d7406a16c62f1e45d
  • libpython3.9-minimal_3.9.2-1+deb11u7+tuxcare.els6_amd64.deb
    sha:1051a2d261aefaf9e545f4ad2606c54639429285
  • libpython3.9-stdlib_3.9.2-1+deb11u7+tuxcare.els6_amd64.deb
    sha:c416e592428487538fcfefbe65dfe73bce177367
  • libpython3.9-testsuite_3.9.2-1+deb11u7+tuxcare.els6_all.deb
    sha:8a29d2dbd4ae7832146c11b3ea6397a038f71a50
  • python3.9_3.9.2-1+deb11u7+tuxcare.els6_amd64.deb
    sha:be8b716378a32d093ff42445f3dd6a5c8568e7ba
  • python3.9-dev_3.9.2-1+deb11u7+tuxcare.els6_amd64.deb
    sha:1b318ea37e3c3638e7b15bcbbbe51f3c6c2a522d
  • python3.9-doc_3.9.2-1+deb11u7+tuxcare.els6_all.deb
    sha:4b3fa75bd1fb4250a30cb7374dc9f1b27352682d
  • python3.9-examples_3.9.2-1+deb11u7+tuxcare.els6_all.deb
    sha:4f4aad3d774aecd0abc24610a8b24ace4c7b07e4
  • python3.9-full_3.9.2-1+deb11u7+tuxcare.els6_amd64.deb
    sha:50428a30eeee63f9ac3f47502a00304ed480f4ec
  • python3.9-minimal_3.9.2-1+deb11u7+tuxcare.els6_amd64.deb
    sha:33116ef6802a7b71138b54bea0606826b28de7bd
  • python3.9-venv_3.9.2-1+deb11u7+tuxcare.els6_amd64.deb
    sha:45f7dc8cde09446a62c0a0e896d1c5b1e36c41f1
  • libpython3.9_3.9.2-1+deb11u7+tuxcare.els6_arm64.deb
    sha:722d89e263b7a229896e3991468cc7930803fed0
  • libpython3.9-dev_3.9.2-1+deb11u7+tuxcare.els6_arm64.deb
    sha:e039deec66d9e7d2e71a583964f8f0b733c714dc
  • libpython3.9-minimal_3.9.2-1+deb11u7+tuxcare.els6_arm64.deb
    sha:40e8dfe4068c525dd14b68448c1db86f2a3ae964
  • libpython3.9-stdlib_3.9.2-1+deb11u7+tuxcare.els6_arm64.deb
    sha:fa2667c837cf857acea860a0f8b4b69a798e676f
  • python3.9_3.9.2-1+deb11u7+tuxcare.els6_arm64.deb
    sha:0a1b51c2f9521500cba2da5f7d9de9e4a6864381
  • python3.9-dev_3.9.2-1+deb11u7+tuxcare.els6_arm64.deb
    sha:b062d6a19b80f4c2dd5a5beff5d5ee646cc5cd78
  • python3.9-full_3.9.2-1+deb11u7+tuxcare.els6_arm64.deb
    sha:c140ce5209ad9748316faff973cbfdf627b83c01
  • python3.9-minimal_3.9.2-1+deb11u7+tuxcare.els6_arm64.deb
    sha:232153ca0d786a1c4a1f6b1b01ebb7548e04dc72
  • python3.9-venv_3.9.2-1+deb11u7+tuxcare.els6_arm64.deb
    sha:80ff425f72a21965f42afe4f046c2f3e072d6e18
  • libpython3.9_3.9.2-1+deb11u7+tuxcare.els6_armel.deb
    sha:dab2aeb7570d6663f065792bed14efeaba1607d1
  • libpython3.9-dev_3.9.2-1+deb11u7+tuxcare.els6_armel.deb
    sha:08d9e38b341da3c8c365aec3fef409f65abe01b6
  • libpython3.9-minimal_3.9.2-1+deb11u7+tuxcare.els6_armel.deb
    sha:b25b839e1701c1a1e3545287978aa733577a8760
  • libpython3.9-stdlib_3.9.2-1+deb11u7+tuxcare.els6_armel.deb
    sha:b3d2a632b217d480558eb18891aa32519467b345
  • python3.9_3.9.2-1+deb11u7+tuxcare.els6_armel.deb
    sha:b8a4b0690eff5d67c63465f38f7762303a913272
  • python3.9-dev_3.9.2-1+deb11u7+tuxcare.els6_armel.deb
    sha:52fb8626f9ce4d18c577494c1404a920fe542a9a
  • python3.9-full_3.9.2-1+deb11u7+tuxcare.els6_armel.deb
    sha:51bf83d80f84e327dcc2838ff96a697ad1496cbf
  • python3.9-minimal_3.9.2-1+deb11u7+tuxcare.els6_armel.deb
    sha:4b84485d3ff0104866ec3d5f17c2d04bbaf27353
  • python3.9-venv_3.9.2-1+deb11u7+tuxcare.els6_armel.deb
    sha:bf759b67fafe5d9bae2418ac34e4bc4be0af11ec
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.