[CLSA-2026:1793180657] Fix CVE(s): CVE-2026-7210
Type:
security
Severity:
None
Release date:
2026-10-28 09:44:25 UTC
Description:
* SECURITY UPDATE: use the 16-byte Expat salt on ELS libexpat - debian/patches/00478-CVE-2026-7210-expat-weak-hashsalt16.patch: detect XML_SetHashSalt16Bytes through a weak symbol instead of the libexpat header version macros, so the 16-byte salt is selected on hosts whose libexpat exports the function behind a pinned pre-2.8.0 version. No effect where the header really is 2.8.0 or newer. - CVE-2026-7210
Updated packages:
  • alt-python312_3.12.16-2_amd64.deb
    sha:a7f1f374d06fec87ce3adb618149a16c96f44f32
  • alt-python312-debug_3.12.16-2_amd64.deb
    sha:c00d925ee227d6b2c8047374a1d9ce8414f9e5e2
  • alt-python312-devel_3.12.16-2_amd64.deb
    sha:a84d2502abb6c60821f12956b61ffc7e8c99f54f
  • alt-python312-idle_3.12.16-2_amd64.deb
    sha:b103766fafead922edf2e102cbc50b91a0d40c8c
  • alt-python312-libs_3.12.16-2_amd64.deb
    sha:8a4e6283d4f821bc07219e1a444118657df4b979
  • alt-python312-test_3.12.16-2_amd64.deb
    sha:569bf53125ed756246d8b517cabe64564afc1c80
  • alt-python312-tkinter_3.12.16-2_amd64.deb
    sha:66aef8e2f7aa1dfb5edd059ad03f0b21587c2ebb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.