[CLSA-2026:1793180387] Fix CVE(s): CVE-2026-7210
Type:
security
Severity:
None
Release date:
2026-10-28 09:39:55 UTC
Description:
* SECURITY UPDATE: use the 16-byte Expat salt on ELS libexpat - debian/patches/00478-CVE-2026-7210-expat-weak-hashsalt16.patch: detect XML_SetHashSalt16Bytes through a weak symbol instead of the libexpat header version macros, so the 16-byte salt is selected on hosts whose libexpat exports the function behind a pinned pre-2.8.0 version. No effect where the header really is 2.8.0 or newer. - CVE-2026-7210
Updated packages:
  • alt-python312_3.12.16-2_amd64.deb
    sha:8599c6f3f35ccfaff2f5f611116fe9c8028a3264
  • alt-python312-debug_3.12.16-2_amd64.deb
    sha:c00d925ee227d6b2c8047374a1d9ce8414f9e5e2
  • alt-python312-devel_3.12.16-2_amd64.deb
    sha:faea0b0018eb321e9a9dac28f0114e38ad7a2c8b
  • alt-python312-idle_3.12.16-2_amd64.deb
    sha:ecfe594541233e188d0ba23272ee6326dc191c71
  • alt-python312-libs_3.12.16-2_amd64.deb
    sha:51cf908cb275f774accafd00a29e759fe9c1f174
  • alt-python312-test_3.12.16-2_amd64.deb
    sha:1a6f44805110ae12b578e2d821341e4e43aa394e
  • alt-python312-tkinter_3.12.16-2_amd64.deb
    sha:accbf7a81b8236045b692831df4ec290ef00e5e1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.