Release date:
2026-08-20 15:17:27 UTC
Description:
* SECURITY UPDATE: quadratic complexity in xml.etree XPath index
predicates
- debian/patches/CVE-2026-6879.patch: cache the indexed sibling lookup
in the ElementPath predicate selector so Element.findall() and a
fully-consumed Element.iterfind() with an XPath index predicate call
parent.findall() once per parent/tag pair instead of once per matching
sibling, removing the O(n^2) CPU DoS on documents with many same-tag
siblings
- CVE-2026-6879
Updated packages:
-
alt-python310_3.10.20-11_amd64.deb
sha:1a0fb713f72e56e945f79e5bb947b173a4e774da
-
alt-python310-debug_3.10.20-11_amd64.deb
sha:9d5d8e1c1b94c0f97e04b974ff9b253f6e3880b1
-
alt-python310-devel_3.10.20-11_amd64.deb
sha:b70bede53b55d07b8f655113237abe40c1c3e5bd
-
alt-python310-idle_3.10.20-11_amd64.deb
sha:7ea9c846f4d319a3accbc3d1b8aea719c216727d
-
alt-python310-libs_3.10.20-11_amd64.deb
sha:1236852705d780a591b396590faeaf01c0845835
-
alt-python310-test_3.10.20-11_amd64.deb
sha:fc57fe07b14aca508da1ef59102ca3b6d2c4c51a
-
alt-python310-tkinter_3.10.20-11_amd64.deb
sha:89d2e3c24c7f97ba2434bb487936b8020cdeb4d7
-
alt-python310_3.10.20-11_arm64.deb
sha:609e8037f413c349191219628f7ad171a9e7e603
-
alt-python310-debug_3.10.20-11_arm64.deb
sha:1547c014d4276fb1316d3a730fe1819896535ee5
-
alt-python310-devel_3.10.20-11_arm64.deb
sha:679b4bdeb7f0a01e70c921491d9a065d920cad44
-
alt-python310-idle_3.10.20-11_arm64.deb
sha:596e89ddcf89693eb51a99d170b366aa60e94e2b
-
alt-python310-libs_3.10.20-11_arm64.deb
sha:95d3b3cea46f064ea7e4cba3d88ecbda00adb998
-
alt-python310-test_3.10.20-11_arm64.deb
sha:bd513275300e794c4bfc3c09994399dfb21f441f
-
alt-python310-tkinter_3.10.20-11_arm64.deb
sha:741bb43d8dc6422d64185d97968e2a15d045c6a1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
