Release date:
2026-10-28 09:39:55 UTC
Description:
* SECURITY UPDATE: use the 16-byte Expat salt on ELS libexpat
- debian/patches/00478-CVE-2026-7210-expat-weak-hashsalt16.patch: detect
XML_SetHashSalt16Bytes through a weak symbol instead of the libexpat
header version macros, so the 16-byte salt is selected on hosts whose
libexpat exports the function behind a pinned pre-2.8.0 version. No
effect where the header really is 2.8.0 or newer.
- CVE-2026-7210
Updated packages:
-
alt-python312_3.12.16-2_amd64.deb
sha:8599c6f3f35ccfaff2f5f611116fe9c8028a3264
-
alt-python312-debug_3.12.16-2_amd64.deb
sha:c00d925ee227d6b2c8047374a1d9ce8414f9e5e2
-
alt-python312-devel_3.12.16-2_amd64.deb
sha:faea0b0018eb321e9a9dac28f0114e38ad7a2c8b
-
alt-python312-idle_3.12.16-2_amd64.deb
sha:ecfe594541233e188d0ba23272ee6326dc191c71
-
alt-python312-libs_3.12.16-2_amd64.deb
sha:51cf908cb275f774accafd00a29e759fe9c1f174
-
alt-python312-test_3.12.16-2_amd64.deb
sha:1a6f44805110ae12b578e2d821341e4e43aa394e
-
alt-python312-tkinter_3.12.16-2_amd64.deb
sha:accbf7a81b8236045b692831df4ec290ef00e5e1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.