Release date:
2026-10-20 08:52:11 UTC
Description:
- CVE-2026-7210: restore the weak-symbol detection of XML_SetHashSalt16Bytes
in pyexpat, reduced to Modules/pyexpat.c on top of the upstream fix that
3.10.22 carries. Upstream selects the 16-byte Expat hash salt only when the
libexpat header reports >= 2.8.0, but ELS libexpat on el8/el9 backports
XML_SetHashSalt16Bytes without bumping its version macros, so 3.10.22-1
fell back to the 8-byte salt there. No-op on el7 (bundled libexpat 2.8.5)
and on hosts whose libexpat does not export the function
Updated packages:
-
alt-python310-3.10.22-2.el10.x86_64.rpm
sha:852ba835ccad87d50a0c575de0f0e72110ba625a7b7a934b8f4bcf3bdc92100b
-
alt-python310-debug-3.10.22-2.el10.x86_64.rpm
sha:2abfcadafb5ae722f57e36f04a928946e940bb73ccb755cef36ddb61705403a7
-
alt-python310-devel-3.10.22-2.el10.x86_64.rpm
sha:a506384ed815423bd975cba3f8d55d083c2452fe2ef632863a5f234384e9b714
-
alt-python310-idle-3.10.22-2.el10.x86_64.rpm
sha:5197202af60844aa3ef042ce0a88559b3a3c0a283b213efaf93b0d79806bb176
-
alt-python310-libs-3.10.22-2.el10.x86_64.rpm
sha:6a96761669ef4df06cddaa28b64a447e1255bbf635d2a817cd63d983a2994248
-
alt-python310-test-3.10.22-2.el10.x86_64.rpm
sha:a5422cd7daaafa5fa912e78e0f2e024ed4d8a165464f8ca2e049c376fdabbfe4
-
alt-python310-tkinter-3.10.22-2.el10.x86_64.rpm
sha:ac484b58447b2bbff75d52cb6329e44d6762e5b2b72d9625db76a601146ea382
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
