[CLSA-2026:1790182713] Fix CVE(s): CVE-2026-2297
Type:
security
Severity:
Low
Release date:
2026-09-23 16:58:47 UTC
Description:
* ALTPYTH-617: Update to 3.11.16 version * Drop patches absorbed by upstream 3.11.16: CVE-2025-13462, CVE-2026-0864, CVE-2026-1502, CVE-2026-3276, CVE-2026-3644, CVE-2026-4224, CVE-2026-4360, CVE-2026-4519, CVE-2026-4786, CVE-2026-6100, CVE-2026-6879, CVE-2026-7774, CVE-2026-8328, CVE-2026-9669, CVE-2026-11940, CVE-2026-11972, CVE-2026-15308, CVE-2026-41080 * Keep CVE-2026-7210, reduced to Modules/pyexpat.c: upstream gates the 16-byte Expat hash salt on the libexpat HEADER version (XML_COMBINED_VERSION >= 20800), but ELS libexpat backports XML_SetHashSalt16Bytes into 2.2.x/2.5.x without bumping its version macros, so that gate is false and CPython would silently fall back to the 8-byte salt on debian10, ubuntu18.04 and ubuntu20.04. The patch restores the weak-symbol check on the function's address. No-op on ubuntu16.04 (bundled libexpat, now 2.8.3) and debian13 (system libexpat 2.8.3). - debian/patches/CVE-2026-7210.patch
CVEs fixed:
Updated packages:
  • alt-python311_3.11.16-1_amd64.deb
    sha:f52327cc9a468e2157485dd2d6b2e00f3cd9796d
  • alt-python311-debug_3.11.16-1_amd64.deb
    sha:6da0cc6c46bb05518429da7b3011d3c5caf0d1c0
  • alt-python311-devel_3.11.16-1_amd64.deb
    sha:cec902f66fe8833f02398e5820774334a84f06ce
  • alt-python311-idle_3.11.16-1_amd64.deb
    sha:d934112cfe8cc562d104e43711db3bfa8c86ce83
  • alt-python311-libs_3.11.16-1_amd64.deb
    sha:e3a4b190e55aacc2bf2d1d70e351ebac62345c0b
  • alt-python311-test_3.11.16-1_amd64.deb
    sha:c4582e311a0ceeb1a2b780b884782a8bf474535f
  • alt-python311-tkinter_3.11.16-1_amd64.deb
    sha:734e5b19999c29a234bce40f098972484fae0f1c
  • alt-python311_3.11.16-1_arm64.deb
    sha:53f53509c4762cac4dc00455033bcb96c8339269
  • alt-python311-debug_3.11.16-1_arm64.deb
    sha:251c83a6a2a7f4a4dd2daea0c18e04cfee0fdc43
  • alt-python311-devel_3.11.16-1_arm64.deb
    sha:3164514879cb8cc76162dc306048d0139d2156db
  • alt-python311-idle_3.11.16-1_arm64.deb
    sha:e94803c30475197bf27c8907f556b204d4e64d35
  • alt-python311-libs_3.11.16-1_arm64.deb
    sha:06860c4916d83290755878f732b09d78016eff75
  • alt-python311-test_3.11.16-1_arm64.deb
    sha:09a2cb539aaedcc01e5522cb0c5dfee81b41461c
  • alt-python311-tkinter_3.11.16-1_arm64.deb
    sha:fc2f203062db7fbd53fa4a11924737f16abaeaba
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.