[CLSA-2026:1790207106] Fix CVE(s): CVE-2026-2297
Type:
security
Severity:
Low
Release date:
2026-09-23 23:45:19 UTC
Description:
* ALTPYTH-616: Update to 3.10.21 * Drop CVE backports included in upstream 3.10.21: CVE-2026-3644, CVE-2026-4224, CVE-2026-4519, CVE-2026-4786, CVE-2026-6100, CVE-2026-9669, CVE-2026-41080, CVE-2026-15308, CVE-2025-13462, CVE-2026-8328, CVE-2026-7774, CVE-2026-1502, CVE-2026-3276, CVE-2026-0864, CVE-2026-11972, CVE-2026-11940, CVE-2026-6879 * debian/patches/CVE-2026-7210.patch: re-anchor the Include/pyexpat.h hunk onto the 3.10.21 PyExpat_CAPI layout, which inserted the SetBillionLaughsAttackProtection* members before the end-of-struct sentinel, so the patch applies with --fuzz=0 instead of relying on the builder's --fuzz=2. No functional change: the new SetHashSalt16Bytes member still lands last in the struct (the expat >= 2.4.0 runtime requirement added on the RPM side is not needed here -- Debian/Ubuntu builds use --without-system-expat)
CVEs fixed:
Updated packages:
  • alt-python310_3.10.21-1_amd64.deb
    sha:69435fea9b7176faca95d303c67ef4d5c28f043a
  • alt-python310-debug_3.10.21-1_amd64.deb
    sha:59d3465dd762ef018fdf654af86a02f168371032
  • alt-python310-devel_3.10.21-1_amd64.deb
    sha:11bb5db3aa6f4b11afedcce59327542523a1a004
  • alt-python310-idle_3.10.21-1_amd64.deb
    sha:e5dcfad28b79b8e923517dfb82e91e29ed6b3cbc
  • alt-python310-libs_3.10.21-1_amd64.deb
    sha:e44cc7698744e359508e2df858bc26248a33e323
  • alt-python310-test_3.10.21-1_amd64.deb
    sha:a72a1101a849093906a3b2b91ab3c7479c9c8bd3
  • alt-python310-tkinter_3.10.21-1_amd64.deb
    sha:949dd3f3ebd254d772f6435e743c9d6a8bf246c0
  • alt-python310_3.10.21-1_arm64.deb
    sha:0c68f24f6e05f7c0c3948808291f3500ef918d30
  • alt-python310-debug_3.10.21-1_arm64.deb
    sha:db8395a45cf0e86c56b393616393ef3423964040
  • alt-python310-devel_3.10.21-1_arm64.deb
    sha:05aed767fcef66f134b1fa573bf49b6dab509b88
  • alt-python310-idle_3.10.21-1_arm64.deb
    sha:a409eaf102663563a9e9d55458a8207ae779fdad
  • alt-python310-libs_3.10.21-1_arm64.deb
    sha:9c3733845d1af4a7146327fc6cb66ca151144444
  • alt-python310-test_3.10.21-1_arm64.deb
    sha:a415ac4a4c01817182a55bb9aa82c95a69770f25
  • alt-python310-tkinter_3.10.21-1_arm64.deb
    sha:095f82a41d9e35c4c1953481e28bb3f4d8f3b78e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.