Release date:
2026-10-28 11:49:08 UTC
Description:
* SECURITY UPDATE: use the 16-byte Expat salt on ELS libexpat
- debian/patches/00477-CVE-2026-7210-expat-weak-hashsalt16.patch: detect
XML_SetHashSalt16Bytes through a weak symbol instead of the libexpat
header version macros, so the 16-byte salt is selected on hosts whose
libexpat exports the function behind a pinned pre-2.8.0 version. No
effect where the header really is 2.8.0 or newer.
- CVE-2026-7210
Updated packages:
-
alt-python314_3.14.10-2_amd64.deb
sha:817dbdc2ce613477be0abca3e43ff61032e3e4d8
-
alt-python314-debug_3.14.10-2_amd64.deb
sha:060ea5482fe0d1b081bd68447d83414f2e3e279a
-
alt-python314-devel_3.14.10-2_amd64.deb
sha:6a0b667029531ddf285d7c92925a318d47eef20a
-
alt-python314-idle_3.14.10-2_amd64.deb
sha:fbdf95263d937891cf07f6f78c2ef1b6d758e1ef
-
alt-python314-libs_3.14.10-2_amd64.deb
sha:71b18b2a4dcc31dc031325d55b9a04309fd1932e
-
alt-python314-test_3.14.10-2_amd64.deb
sha:27fcf29dc858ef44d48ddf0032401bcb20375651
-
alt-python314-tkinter_3.14.10-2_amd64.deb
sha:8ff682f21c3857813c896d4c06a574506946ab71
-
alt-python314_3.14.10-2_arm64.deb
sha:831ded6753de8502d14e9d2c7f552d16bc4637a9
-
alt-python314-debug_3.14.10-2_arm64.deb
sha:74b4a99e1875ae4749a692faa8cab532ac4db666
-
alt-python314-devel_3.14.10-2_arm64.deb
sha:99962e2100e4b19c94c5db4bd964906a189108dd
-
alt-python314-idle_3.14.10-2_arm64.deb
sha:cff3d85c3c77abfa1e03a25cc9558f33ff88fbdc
-
alt-python314-libs_3.14.10-2_arm64.deb
sha:0f722ebd7f51aece1b699e837bb35ab8999ece8c
-
alt-python314-test_3.14.10-2_arm64.deb
sha:9e9f9012dc4df201e6386a95179ed7b442d22197
-
alt-python314-tkinter_3.14.10-2_arm64.deb
sha:a4d0f3ae66e105e65a467f6b61f63463ab9c17d3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
