CLSA-2026-1786468462

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1786468462.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1786468462
Upstream
Published
2026-08-11T17:14:40Z
Modified
2026-10-26T09:30:34Z
Summary
python-setuptools: Fix of CVE-2026-59890
Details
  • CVE-2026-59890: normalize Unicode form (NFC) on both the MANIFEST.in pattern and the candidate path before matching, so an exclude directive cannot be bypassed by a decomposed (NFD) file name
References

Affected packages

TuxCare:AlmaLinux:9.2 / python3-setuptools

Package

Name
python3-setuptools
Purl
pkg:rpm/tuxcare/python3-setuptools?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
53.0.0-12.el9.tuxcare.els2

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1786468462.json"

TuxCare:AlmaLinux:9.2 / python3-setuptools-wheel

Package

Name
python3-setuptools-wheel
Purl
pkg:rpm/tuxcare/python3-setuptools-wheel?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
53.0.0-12.el9.tuxcare.els2

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1786468462.json"