[CLSA-2026:1793182148] Fix CVE(s): CVE-2026-7210
Type:
security
Severity:
None
Release date:
2026-10-28 10:09:16 UTC
Description:
* SECURITY UPDATE: use the 16-byte Expat salt on ELS libexpat - debian/patches/00478-CVE-2026-7210-expat-weak-hashsalt16.patch: detect XML_SetHashSalt16Bytes through a weak symbol instead of the libexpat header version macros, so the 16-byte salt is selected on hosts whose libexpat exports the function behind a pinned pre-2.8.0 version. No effect where the header really is 2.8.0 or newer. - CVE-2026-7210
Updated packages:
  • alt-python312_3.12.16-2_amd64.deb
    sha:02203c9241ae03b7617219ee4b33b026bb3856a1
  • alt-python312-debug_3.12.16-2_amd64.deb
    sha:5b2dbc15e0c112eb2146b989d877b7212fb64bec
  • alt-python312-devel_3.12.16-2_amd64.deb
    sha:57492695c3219dcb56b242789432707ece80c94c
  • alt-python312-idle_3.12.16-2_amd64.deb
    sha:3f98cbb99a889d1de12d9016a5ecdab83c1d7349
  • alt-python312-libs_3.12.16-2_amd64.deb
    sha:4af7afd7de5c2ae87be7291810044020a5d08ffb
  • alt-python312-test_3.12.16-2_amd64.deb
    sha:2f58123da3a8e08f1a04b9c1601f813b1b2998f4
  • alt-python312-tkinter_3.12.16-2_amd64.deb
    sha:1a02c4be70f26ff6a97e2909591ef45494e11024
  • alt-python312_3.12.16-2_arm64.deb
    sha:79343c023a62c69da3c3a4e1820fd8fd8b5b1d31
  • alt-python312-debug_3.12.16-2_arm64.deb
    sha:5e9ecf345c5bf5d9e8b5420168ea9bdcd341eda9
  • alt-python312-devel_3.12.16-2_arm64.deb
    sha:ca2c18ef24efe1dbb70eb325000f9569b2d3aa2f
  • alt-python312-idle_3.12.16-2_arm64.deb
    sha:7742a8075b02abcd5bc422d851a9d8c0539b6752
  • alt-python312-libs_3.12.16-2_arm64.deb
    sha:cd55a3c52fbb5e8e5e54e2ad24362415aee21aaa
  • alt-python312-test_3.12.16-2_arm64.deb
    sha:af78a32643cc57c0d5cf142d6eb51fb084fa3178
  • alt-python312-tkinter_3.12.16-2_arm64.deb
    sha:e3ebded03ae6d0575c3fc8bd1f4c27f98aa05280
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.