Release date:
2026-07-02 09:04:26 UTC
Description:
- CVE-2026-4224: guard conv_content_model() in pyexpat against unbounded C
recursion (C stack overflow) when an Expat parser with a registered
ElementDeclHandler parses an inline DTD containing a deeply nested content
model, using Py_EnterRecursiveCall/Py_LeaveRecursiveCall
Updated packages:
-
python2-2.7.18-4.module_el8.4.0+2430+eaf5f37f.tuxcare.els25.x86_64.rpm
sha:8ae297eec169d3cd86c758e206ba65924303232f34b430fa06a2bb823dc51bda
-
python2-debug-2.7.18-4.module_el8.4.0+2430+eaf5f37f.tuxcare.els25.x86_64.rpm
sha:808921c637f39df8bc63faee66c7853382f2f87980dcc28fecac9b0a9665f375
-
python2-devel-2.7.18-4.module_el8.4.0+2430+eaf5f37f.tuxcare.els25.x86_64.rpm
sha:139e7ee0a7486489d6b104ca5904afd4c14d111adbba95c1752682b3b67f198a
-
python2-libs-2.7.18-4.module_el8.4.0+2430+eaf5f37f.tuxcare.els25.x86_64.rpm
sha:29d0b663a790cd375d53c6797d6655a423cb44dc5ad0d337f14bb5950ea74d51
-
python2-test-2.7.18-4.module_el8.4.0+2430+eaf5f37f.tuxcare.els25.x86_64.rpm
sha:5793edb9bb6cf7dbb08d44390c9d348cd01c4e70b91d1af447810592b88388ba
-
python2-tkinter-2.7.18-4.module_el8.4.0+2430+eaf5f37f.tuxcare.els25.x86_64.rpm
sha:c597571ac77a7e56fb1bca9a194a32ebf7c55edba25e4115127d07b32d6a0c75
-
python2-tools-2.7.18-4.module_el8.4.0+2430+eaf5f37f.tuxcare.els25.x86_64.rpm
sha:eca1d86c4d8134d75149399a6a4fb127f69707bf94a448028a9d1e91b8beb9b0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.