Release date:
2026-08-20 11:30:25 UTC
Description:
* SECURITY UPDATE: quadratic complexity in xml.etree XPath index
predicates
- debian/patches/CVE-2026-6879.patch: cache the indexed sibling lookup
in the ElementPath predicate selector so Element.findall() and a
fully-consumed Element.iterfind() with an XPath index predicate call
parent.findall() once per parent/tag pair instead of once per matching
sibling, removing the O(n^2) CPU DoS on documents with many same-tag
siblings
- CVE-2026-6879
Updated packages:
-
alt-python310_3.10.20-11_amd64.deb
sha:c1d7d871dae3f01ade1e85650213866f8aa1708d
-
alt-python310-debug_3.10.20-11_amd64.deb
sha:485527d1c04b22ec06b3bbfc22a9b18af7eb55dd
-
alt-python310-devel_3.10.20-11_amd64.deb
sha:836903a0a19c8df3cc59d99b9e2f3bb0ef0b2c7d
-
alt-python310-idle_3.10.20-11_amd64.deb
sha:cb7983a38ff35827b5e11a4886eb7adce82fea3a
-
alt-python310-libs_3.10.20-11_amd64.deb
sha:782d1e57089c9fb63dc34f3c1cc93820a9df05b5
-
alt-python310-test_3.10.20-11_amd64.deb
sha:a75d1346ad45489e69e7276c3085f81f21966534
-
alt-python310-tkinter_3.10.20-11_amd64.deb
sha:6bbcf9955383083d1b359193c5e86d41f10d38b2
-
alt-python310_3.10.20-11_arm64.deb
sha:941fd1047b4d93fc0c29dc047951f5b869ab2dfa
-
alt-python310-debug_3.10.20-11_arm64.deb
sha:98e9edfa0cd74d1a93c248de318701951c663a63
-
alt-python310-devel_3.10.20-11_arm64.deb
sha:d65113d68a9c2128ae1deecef56812113ab4aa26
-
alt-python310-idle_3.10.20-11_arm64.deb
sha:2cc839ff0c4eb8f580fcd8db0ff36825c5150b67
-
alt-python310-libs_3.10.20-11_arm64.deb
sha:1a3cfc047b158b728a85a5d4b227b689063578d2
-
alt-python310-test_3.10.20-11_arm64.deb
sha:eaa9782fd886ffb4b7a8e696d8366cd0c8e92a88
-
alt-python310-tkinter_3.10.20-11_arm64.deb
sha:61cae4d64aeb98875f6fbf71231ffadc8be9f3e7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
