[CLSA-2026:1793182480] Fix CVE(s): CVE-2026-7210
Type:
security
Severity:
None
Release date:
2026-10-28 10:14:48 UTC
Description:
* SECURITY UPDATE: use the 16-byte Expat salt on ELS libexpat - debian/patches/00478-CVE-2026-7210-expat-weak-hashsalt16.patch: detect XML_SetHashSalt16Bytes through a weak symbol instead of the libexpat header version macros, so the 16-byte salt is selected on hosts whose libexpat exports the function behind a pinned pre-2.8.0 version. No effect where the header really is 2.8.0 or newer. - CVE-2026-7210
Updated packages:
  • alt-python312_3.12.16-2_amd64.deb
    sha:f7da8c7261d1306f0c3d7ffe33fb4fe3ab28e554
  • alt-python312-debug_3.12.16-2_amd64.deb
    sha:5b2dbc15e0c112eb2146b989d877b7212fb64bec
  • alt-python312-devel_3.12.16-2_amd64.deb
    sha:cc17a54953f4631e205ffeec4221dac06409bf10
  • alt-python312-idle_3.12.16-2_amd64.deb
    sha:3cb055312d02880e346c0ad8f85e80942e3e2e61
  • alt-python312-libs_3.12.16-2_amd64.deb
    sha:1b61ca1ae495c6986bb45b11a4bcadde3df52861
  • alt-python312-test_3.12.16-2_amd64.deb
    sha:41a5ba689d20f135ae12329e40c0d4a8f484f7e9
  • alt-python312-tkinter_3.12.16-2_amd64.deb
    sha:7b47a1f6abff50127534b28166f3029617f1662b
  • alt-python312_3.12.16-2_arm64.deb
    sha:80de63a1a6af5d216e02a2f0bf4056810d827f94
  • alt-python312-debug_3.12.16-2_arm64.deb
    sha:5e9ecf345c5bf5d9e8b5420168ea9bdcd341eda9
  • alt-python312-devel_3.12.16-2_arm64.deb
    sha:0170eb3f1ef28ee6df2ebc776dd577f747f4394c
  • alt-python312-idle_3.12.16-2_arm64.deb
    sha:6d65dd1fea3f3c3b143c1b3366e99a858bd00123
  • alt-python312-libs_3.12.16-2_arm64.deb
    sha:9ae30911c653a3561bcc8fc6c9fa32aaf4e6b0c7
  • alt-python312-test_3.12.16-2_arm64.deb
    sha:c9f0a26d4e0460dc6391ffc92ddc7201f213d1ab
  • alt-python312-tkinter_3.12.16-2_arm64.deb
    sha:73141face2403b6957ed30bd595fd42bec155a07
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.