Release date:
2026-10-28 11:00:13 UTC
Description:
* SECURITY UPDATE: use the 16-byte Expat salt on ELS libexpat
- debian/patches/00476-CVE-2026-7210-expat-weak-hashsalt16.patch: detect
XML_SetHashSalt16Bytes through a weak symbol instead of the libexpat
header version macros, so the 16-byte salt is selected on hosts whose
libexpat exports the function behind a pinned pre-2.8.0 version. No
effect where the header really is 2.8.0 or newer.
- CVE-2026-7210
Updated packages:
-
alt-python313_3.13.18-2_amd64.deb
sha:de771f31853dce7c1d43054904ba35c5cb9a8e31
-
alt-python313-debug_3.13.18-2_amd64.deb
sha:737a488f1bdc0f8c6a6620c7714e55e54d3f8932
-
alt-python313-devel_3.13.18-2_amd64.deb
sha:f4e19f444576ec39813589b91bf6104594073bc0
-
alt-python313-idle_3.13.18-2_amd64.deb
sha:e0b6552f0136fd915fc7bee1f2cca20e4b5973f0
-
alt-python313-libs_3.13.18-2_amd64.deb
sha:1adb6b93d2ed81bba7b675752bdc023e13a05004
-
alt-python313-test_3.13.18-2_amd64.deb
sha:38e147cc7c6455afedac84ff6b9af07b2bd5b893
-
alt-python313-tkinter_3.13.18-2_amd64.deb
sha:29d7f3abfadbc473c1209fc2322fc679a0c8c8fb
-
alt-python313_3.13.18-2_arm64.deb
sha:082680b5d8dc11f4234ad560a0feb7aa4860caec
-
alt-python313-debug_3.13.18-2_arm64.deb
sha:6c10acfe137751632a969dd5f386ef8f02cee284
-
alt-python313-devel_3.13.18-2_arm64.deb
sha:91115736179496f4ac72a6ec8026aaaf41477b84
-
alt-python313-idle_3.13.18-2_arm64.deb
sha:821ad0ade87c07bc5621f8ed6b8284beb515b3ee
-
alt-python313-libs_3.13.18-2_arm64.deb
sha:1417df263ff12f222dc263f8b761505af8e6996d
-
alt-python313-test_3.13.18-2_arm64.deb
sha:a42b9e17b9ccf59c6d36b873840d50f1ad2e736e
-
alt-python313-tkinter_3.13.18-2_arm64.deb
sha:e8c735bc835e7e4dd831d41a3cde87e3e3cf383f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
