Release date:
2026-08-20 12:17:25 UTC
Description:
* SECURITY UPDATE: quadratic complexity in xml.etree XPath index
predicates
- debian/patches/CVE-2026-6879.patch: cache the indexed sibling lookup
in the ElementPath predicate selector so Element.findall() and a
fully-consumed Element.iterfind() with an XPath index predicate call
parent.findall() once per parent/tag pair instead of once per matching
sibling, removing the O(n^2) CPU DoS on documents with many same-tag
siblings
- CVE-2026-6879
Updated packages:
-
alt-python310_3.10.20-11_amd64.deb
sha:277b5c040757113c29cc90bad5c941ae68f27b2d
-
alt-python310-debug_3.10.20-11_amd64.deb
sha:485527d1c04b22ec06b3bbfc22a9b18af7eb55dd
-
alt-python310-devel_3.10.20-11_amd64.deb
sha:cf1dbb15a10405a4be5e0ee3c07ae3da87439907
-
alt-python310-idle_3.10.20-11_amd64.deb
sha:b150e22a7e901cf4dd4d603a541600ad1e14e1db
-
alt-python310-libs_3.10.20-11_amd64.deb
sha:b2a25eb03ce1a39918cb69711e123b3bdb32594e
-
alt-python310-test_3.10.20-11_amd64.deb
sha:7d86960fedd3ac43cfea6d695b0affd9da5cca28
-
alt-python310-tkinter_3.10.20-11_amd64.deb
sha:0465b1ffead60c686a2e314b1aa5db143bf213ba
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
