Release date:
2026-08-20 14:22:35 UTC
Description:
* SECURITY UPDATE: quadratic complexity in xml.etree XPath index
predicates
- debian/patches/CVE-2026-6879.patch: cache the indexed sibling lookup
in the ElementPath predicate selector so Element.findall() and a
fully-consumed Element.iterfind() with an XPath index predicate call
parent.findall() once per parent/tag pair instead of once per matching
sibling, removing the O(n^2) CPU DoS on documents with many same-tag
siblings
- CVE-2026-6879
Updated packages:
-
alt-python310_3.10.20-11_amd64.deb
sha:4f34c7bb9bdcc4d7b788ac8387ee2965930a0cab
-
alt-python310-debug_3.10.20-11_amd64.deb
sha:485527d1c04b22ec06b3bbfc22a9b18af7eb55dd
-
alt-python310-devel_3.10.20-11_amd64.deb
sha:723503cdf605e398372d6f0e7dd6c36483f90baa
-
alt-python310-idle_3.10.20-11_amd64.deb
sha:ae39262ec59b6099f1e5feb964416fe1afa4fffa
-
alt-python310-libs_3.10.20-11_amd64.deb
sha:00de5a49967f8cd0839d66630b5085f8d7f60193
-
alt-python310-test_3.10.20-11_amd64.deb
sha:848f438d967b29960fd5f06d8cbe6da9c53306a6
-
alt-python310-tkinter_3.10.20-11_amd64.deb
sha:8c4e4bd64cca27c6b9edd22490532426beb457fa
-
alt-python310_3.10.20-11_arm64.deb
sha:e29b63b48edb93972a650bf3a01cfd1094bf4d79
-
alt-python310-debug_3.10.20-11_arm64.deb
sha:98e9edfa0cd74d1a93c248de318701951c663a63
-
alt-python310-devel_3.10.20-11_arm64.deb
sha:80affd3b00d7190f26bb55b1885f417c37ace2ac
-
alt-python310-idle_3.10.20-11_arm64.deb
sha:3473385dea8f40f832cdd16d3d27f8fd377587c7
-
alt-python310-libs_3.10.20-11_arm64.deb
sha:b6c7e22ce4cdea59cda4497cc0294f6f45c2d951
-
alt-python310-test_3.10.20-11_arm64.deb
sha:74a8726ed70f806b55a1d86b79ed65f4f841ec14
-
alt-python310-tkinter_3.10.20-11_arm64.deb
sha:48a1d37a1c5aa731214304378a10b6adb94aa871
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
