Release date:
2026-10-20 08:13:08 UTC
Description:
- CVE-2026-7210: restore the weak-symbol detection of XML_SetHashSalt16Bytes
in pyexpat, reduced to Modules/pyexpat.c on top of the upstream fix that
3.10.22 carries. Upstream selects the 16-byte Expat hash salt only when the
libexpat header reports >= 2.8.0, but ELS libexpat on el8/el9 backports
XML_SetHashSalt16Bytes without bumping its version macros, so 3.10.22-1
fell back to the 8-byte salt there. No-op on el7 (bundled libexpat 2.8.5)
and on hosts whose libexpat does not export the function
Updated packages:
-
alt-python310-3.10.22-2.el9.x86_64.rpm
sha:fd49a02f6eb50877cbbc9656e08a86430a5daab3ab9716f447eeb98bf9fd22f1
-
alt-python310-debug-3.10.22-2.el9.x86_64.rpm
sha:1f9e5e993dc400c0cd36e6ff03002be1bfc198eea1eef2d9139fc5a745da5c6d
-
alt-python310-devel-3.10.22-2.el9.x86_64.rpm
sha:f813f74af891b9f39fa54b9c72a73d0f52b085baa6a43f0ff600d5a8e6be25a3
-
alt-python310-idle-3.10.22-2.el9.x86_64.rpm
sha:f0a953e49fdd983a804cba63c3cb2c631c03e1a5527c0dec62a197d78ef9c071
-
alt-python310-libs-3.10.22-2.el9.x86_64.rpm
sha:19f81154a0ce03c9f52d3d8c9327f0c8ee1e77513c7e10ea8486c496d3029799
-
alt-python310-test-3.10.22-2.el9.x86_64.rpm
sha:bfa16a20b2c581e552c1ecf12d9b71afdb9a6fd5f2b073408c61a770bc0fa934
-
alt-python310-tkinter-3.10.22-2.el9.x86_64.rpm
sha:128e62e43633803741c989202fc82207d6543c954c63632027c5b2adf0973df8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
