[CLSA-2026:1793185469] Fix CVE(s): CVE-2026-7210
Type:
security
Severity:
None
Release date:
2026-10-28 11:04:38 UTC
Description:
* SECURITY UPDATE: use the 16-byte Expat salt on ELS libexpat - debian/patches/00476-CVE-2026-7210-expat-weak-hashsalt16.patch: detect XML_SetHashSalt16Bytes through a weak symbol instead of the libexpat header version macros, so the 16-byte salt is selected on hosts whose libexpat exports the function behind a pinned pre-2.8.0 version. No effect where the header really is 2.8.0 or newer. - CVE-2026-7210
Updated packages:
  • alt-python313_3.13.18-2_amd64.deb
    sha:447e3525ba7a8aa489cf0b6b8b4a91523ff601f0
  • alt-python313-debug_3.13.18-2_amd64.deb
    sha:737a488f1bdc0f8c6a6620c7714e55e54d3f8932
  • alt-python313-devel_3.13.18-2_amd64.deb
    sha:7d5d68039856c7174d224d8ed4a3547f7432880d
  • alt-python313-idle_3.13.18-2_amd64.deb
    sha:d4084f8ffdc8f57c55cc68573722b4e8a792fb0a
  • alt-python313-libs_3.13.18-2_amd64.deb
    sha:5d04efc5f43e8c00b98d40600755a90d57059ec3
  • alt-python313-test_3.13.18-2_amd64.deb
    sha:80ff2bcaa9759d8629451b8cde24406e8baaf570
  • alt-python313-tkinter_3.13.18-2_amd64.deb
    sha:6a1f3c86d8bc89b846ca19fac1aef88bd1391e03
  • alt-python313_3.13.18-2_arm64.deb
    sha:066b14685d6c771af24fcc5df7f5cddf848ef9dc
  • alt-python313-debug_3.13.18-2_arm64.deb
    sha:6c10acfe137751632a969dd5f386ef8f02cee284
  • alt-python313-devel_3.13.18-2_arm64.deb
    sha:627a24b54706957b0fb011d936d606109d91c664
  • alt-python313-idle_3.13.18-2_arm64.deb
    sha:862ea51cec1fca30213b99dc55fe192150b530dc
  • alt-python313-libs_3.13.18-2_arm64.deb
    sha:c53d74be4e760577fd2870a276da46455d2dd29c
  • alt-python313-test_3.13.18-2_arm64.deb
    sha:6f0183ce9fa53141a05758ae7a4ed18167bb3281
  • alt-python313-tkinter_3.13.18-2_arm64.deb
    sha:2697ee001f4818a0ace584377e66429881a4626f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.