Release date:
2026-10-28 10:32:43 UTC
Description:
* SECURITY UPDATE: use the 16-byte Expat salt on ELS libexpat
- debian/patches/00476-CVE-2026-7210-expat-weak-hashsalt16.patch: detect
XML_SetHashSalt16Bytes through a weak symbol instead of the libexpat
header version macros, so the 16-byte salt is selected on hosts whose
libexpat exports the function behind a pinned pre-2.8.0 version. No
effect where the header really is 2.8.0 or newer.
- CVE-2026-7210
Updated packages:
-
alt-python313_3.13.18-2_amd64.deb
sha:c649ef72fbe86ba4dfa15e39948ec03536817f13
-
alt-python313-debug_3.13.18-2_amd64.deb
sha:530e6022b29931a478c0ee1bb3258385dd15f899
-
alt-python313-devel_3.13.18-2_amd64.deb
sha:6c4a450ee345409d2ec20c3e334eae891399a847
-
alt-python313-idle_3.13.18-2_amd64.deb
sha:2190a106712b8aad847f5e8bede5b848f26b9452
-
alt-python313-libs_3.13.18-2_amd64.deb
sha:fd6bf734509974ceb669233e5e287862d29ea55c
-
alt-python313-test_3.13.18-2_amd64.deb
sha:4f318746399fb9ed1ee6c74cab14875303a348dc
-
alt-python313-tkinter_3.13.18-2_amd64.deb
sha:9bdbafa47466459aaae6d66a9e08fc3b14efbecd
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.