[CLSA-2026:1781346632] python: Fix of CVE-2026-7210
Type:
security
Severity:
Critical
Release date:
2026-06-13 10:31:30 UTC
Description:
- CVE-2026-7210: when hash randomization is enabled, seed libexpat's hash-flooding protection in pyexpat with a full 16 bytes of entropy via XML_SetHashSalt16Bytes, detected at runtime through a weak symbol so it activates once the system libexpat exposes it, instead of the 4-8 byte XML_SetHashSalt
CVEs fixed:
Updated packages:
  • python-2.6.6-70.el6.tuxcare.els23.i686.rpm
    sha:d6f6b792c81aed5d356172b8eeedb41253b8889cbb31f0ef9c6c42faa23bd3cc
  • python-2.6.6-70.el6.tuxcare.els23.x86_64.rpm
    sha:57b31ac7927f0522d345b201638c5632fcb9109f8b1defead4a83a7858c46f7e
  • python-devel-2.6.6-70.el6.tuxcare.els23.i686.rpm
    sha:fb9a0b0613beed02c6ca12b599ad0a240b0342153086a8645974cd6330f54d0c
  • python-devel-2.6.6-70.el6.tuxcare.els23.x86_64.rpm
    sha:6ca1251717669d15afca6c59c7473ca2b136b60f33da0ac6503e89d4d725107a
  • python-libs-2.6.6-70.el6.tuxcare.els23.i686.rpm
    sha:454c28e96ccc0eaadec8ccfa39345ebcd28e7327e7ff0fd5f7cb7dd4f634bedb
  • python-libs-2.6.6-70.el6.tuxcare.els23.x86_64.rpm
    sha:79f55fe9cf75e8b931c40869cc21f1547e537b312532edc4e5d3eba3f414b371
  • python-test-2.6.6-70.el6.tuxcare.els23.x86_64.rpm
    sha:8e7c6b8fd26c5e4d5cfacfff4f06ea257b0897fc30e6e58857b0b6c27cadf75d
  • python-tools-2.6.6-70.el6.tuxcare.els23.x86_64.rpm
    sha:7f29be48ec0d75ba795a0ec18e95f7227c46ef90370a5e136a5492b1e21017da
  • tkinter-2.6.6-70.el6.tuxcare.els23.x86_64.rpm
    sha:e7d9a0eb3541f919d485e66222f90ec47895756e2363887632b17499856ab85d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.