Release date:
2026-07-27 17:00:26 UTC
Description:
- CVE-2023-5752: Mercurial option injection via crafted VCS revision
- CVE-2025-8869: arbitrary file overwrite via symlinks in sdist tarballs
- CVE-2026-3219: archive confusion via tar/ZIP polyglot files
- CVE-2026-1703: path traversal via string-prefix sibling directories
- CVE-2026-6357: code execution via post-install pip self-version check imports
Updated packages:
-
alt-python311-pip-21.3.1-5.el8.noarch.rpm
sha:a3e95fb8568330d014082d1aad7276708b319d995a1d0acbe9a8c2a3e68bba8d
-
alt-python311-pip-wheel-21.3.1-5.el8.noarch.rpm
sha:5c71a622d7ca8ffa89edb2058fc48200f62d280383735b690a8bbfd2bf52f370
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
