[CLSA-2026:1793188401] Fix CVE(s): CVE-2026-7210
Type:
security
Severity:
None
Release date:
2026-10-28 11:53:29 UTC
Description:
* SECURITY UPDATE: use the 16-byte Expat salt on ELS libexpat - debian/patches/00477-CVE-2026-7210-expat-weak-hashsalt16.patch: detect XML_SetHashSalt16Bytes through a weak symbol instead of the libexpat header version macros, so the 16-byte salt is selected on hosts whose libexpat exports the function behind a pinned pre-2.8.0 version. No effect where the header really is 2.8.0 or newer. - CVE-2026-7210
Updated packages:
  • alt-python314_3.14.10-2_amd64.deb
    sha:80f19cdf92e96a0495a7594c5eb14672e8e71b82
  • alt-python314-debug_3.14.10-2_amd64.deb
    sha:060ea5482fe0d1b081bd68447d83414f2e3e279a
  • alt-python314-devel_3.14.10-2_amd64.deb
    sha:0077b320e56e748f4af8e22ad7e2315cc45cd054
  • alt-python314-idle_3.14.10-2_amd64.deb
    sha:b44a7e05900a81a0d2703bcee40f432666aaf009
  • alt-python314-libs_3.14.10-2_amd64.deb
    sha:3de4b0468646909c5ff7d8f0d24a3017a6c3f0fe
  • alt-python314-test_3.14.10-2_amd64.deb
    sha:9365484d4756e7fb71a5fd42edd3006bfbc5bb7b
  • alt-python314-tkinter_3.14.10-2_amd64.deb
    sha:1bb5a5468d947956bdc84d62dd22feacc3ef46de
  • alt-python314_3.14.10-2_arm64.deb
    sha:f728be5d04697e4dd00fce120b45d42258019957
  • alt-python314-debug_3.14.10-2_arm64.deb
    sha:74b4a99e1875ae4749a692faa8cab532ac4db666
  • alt-python314-devel_3.14.10-2_arm64.deb
    sha:2bc82551fb74e8a6b1dd95097446482109072fde
  • alt-python314-idle_3.14.10-2_arm64.deb
    sha:7e88bd992a182bf063acdcae09493db254264b76
  • alt-python314-libs_3.14.10-2_arm64.deb
    sha:1a20be24b58c2f787b7edeb515f2b8004c99f145
  • alt-python314-test_3.14.10-2_arm64.deb
    sha:43f3a30daeb1ece12425eb14b51e84809b414f0e
  • alt-python314-tkinter_3.14.10-2_arm64.deb
    sha:d535de80eba652fbbbd4ec982ffb44b74f69efb1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.