Release date:
2026-10-28 11:23:24 UTC
Description:
* SECURITY UPDATE: use the 16-byte Expat salt on ELS libexpat
- debian/patches/00477-CVE-2026-7210-expat-weak-hashsalt16.patch: detect
XML_SetHashSalt16Bytes through a weak symbol instead of the libexpat
header version macros, so the 16-byte salt is selected on hosts whose
libexpat exports the function behind a pinned pre-2.8.0 version. No
effect where the header really is 2.8.0 or newer.
- CVE-2026-7210
Updated packages:
-
alt-python314_3.14.10-2_amd64.deb
sha:9bda06c088f131ee47811269813e48cd332e1bdc
-
alt-python314-debug_3.14.10-2_amd64.deb
sha:ff5b3deddd880c01fbac1a3894d82bba4cf3df98
-
alt-python314-devel_3.14.10-2_amd64.deb
sha:67737a6de64849a711bd40e5d207c0a378bfc5f2
-
alt-python314-idle_3.14.10-2_amd64.deb
sha:10f03a5597388281da237113398c2a4e685bcaed
-
alt-python314-libs_3.14.10-2_amd64.deb
sha:60c386d03354a17813d58696642670d6d97f565b
-
alt-python314-test_3.14.10-2_amd64.deb
sha:32e6f9119e2e0000157edf221a96f9cce5cdb5cc
-
alt-python314-tkinter_3.14.10-2_amd64.deb
sha:95e6a075c838d5a3dee5b5f4c9235e0cd48b730d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
