Release date:
2026-10-20 07:54:18 UTC
Description:
- CVE-2026-7210: restore the weak-symbol detection of XML_SetHashSalt16Bytes
in pyexpat, reduced to Modules/pyexpat.c on top of the upstream fix that
3.10.22 carries. Upstream selects the 16-byte Expat hash salt only when the
libexpat header reports >= 2.8.0, but ELS libexpat on el8/el9 backports
XML_SetHashSalt16Bytes without bumping its version macros, so 3.10.22-1
fell back to the 8-byte salt there. No-op on el7 (bundled libexpat 2.8.5)
and on hosts whose libexpat does not export the function
Updated packages:
-
alt-python310-3.10.22-2.el8.x86_64.rpm
sha:9b1958183bb030d50671f541d61f61c2f89dbdc530248f4489518c616157291a
-
alt-python310-debug-3.10.22-2.el8.x86_64.rpm
sha:a0dfc6694e9496dbe2b3657c004547cea274a12508faae7662c9c7d2a7a540cd
-
alt-python310-devel-3.10.22-2.el8.x86_64.rpm
sha:fcc25d4e3add323684c06d882e9ee6df4ad7fdff89a9c1925edea65afed8b55d
-
alt-python310-idle-3.10.22-2.el8.x86_64.rpm
sha:a810ac2e0c489ab2a9a50c6e8403934fa9ad907e4a047b4730e5c3353f9ec13d
-
alt-python310-libs-3.10.22-2.el8.x86_64.rpm
sha:9d1c985d9175d13b3d3e76efe68e489cd8c4b6a0b8351b91564f1c7434975243
-
alt-python310-test-3.10.22-2.el8.x86_64.rpm
sha:e3df2bd066a678ea71e0152bac50048c69ae1120a406dce7291b976c6c082bd4
-
alt-python310-tkinter-3.10.22-2.el8.x86_64.rpm
sha:4c1b7d665862247767c33f5541fd234b499583dcb7853ccc8cb39e9fd8bcff1e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
