[CLSA-2026:1790172683] Fix CVE(s): CVE-2026-2297
Type:
security
Severity:
Low
Release date:
2026-09-23 14:11:35 UTC
Description:
* ALTPYTH-617: Update to 3.11.16 version * Drop patches absorbed by upstream 3.11.16: CVE-2025-13462, CVE-2026-0864, CVE-2026-1502, CVE-2026-3276, CVE-2026-3644, CVE-2026-4224, CVE-2026-4360, CVE-2026-4519, CVE-2026-4786, CVE-2026-6100, CVE-2026-6879, CVE-2026-7774, CVE-2026-8328, CVE-2026-9669, CVE-2026-11940, CVE-2026-11972, CVE-2026-15308, CVE-2026-41080 * Keep CVE-2026-7210, reduced to Modules/pyexpat.c: upstream gates the 16-byte Expat hash salt on the libexpat HEADER version (XML_COMBINED_VERSION >= 20800), but ELS libexpat backports XML_SetHashSalt16Bytes into 2.2.x/2.5.x without bumping its version macros, so that gate is false and CPython would silently fall back to the 8-byte salt on debian10, ubuntu18.04 and ubuntu20.04. The patch restores the weak-symbol check on the function's address. No-op on ubuntu16.04 (bundled libexpat, now 2.8.3) and debian13 (system libexpat 2.8.3). - debian/patches/CVE-2026-7210.patch
CVEs fixed:
Updated packages:
  • alt-python311_3.11.16-1_amd64.deb
    sha:4fdee279ac9f830880009ef2abd09c4b22742998
  • alt-python311-debug_3.11.16-1_amd64.deb
    sha:6da0cc6c46bb05518429da7b3011d3c5caf0d1c0
  • alt-python311-devel_3.11.16-1_amd64.deb
    sha:bbc0419e2931c4b04ae32cf47ab6413d9b90b913
  • alt-python311-idle_3.11.16-1_amd64.deb
    sha:8172b097889fee828c6578e8ca2b57372ab314a1
  • alt-python311-libs_3.11.16-1_amd64.deb
    sha:92ceca917484ad205ec010c7a9f67b2aa1040946
  • alt-python311-test_3.11.16-1_amd64.deb
    sha:f7dbe4ec305bb3f5e16c181b10cbc23e881e937c
  • alt-python311-tkinter_3.11.16-1_amd64.deb
    sha:19ce09c571ad5cf5e58729bdddd480f92052f12e
  • alt-python311_3.11.16-1_arm64.deb
    sha:e3144c62cde36cfc7b50dfc2380ae0632fe187dd
  • alt-python311-debug_3.11.16-1_arm64.deb
    sha:251c83a6a2a7f4a4dd2daea0c18e04cfee0fdc43
  • alt-python311-devel_3.11.16-1_arm64.deb
    sha:b8ad89561e4ec357fba9705160a313e815d838f5
  • alt-python311-idle_3.11.16-1_arm64.deb
    sha:209850de8f9217d2277e798773b038632cad7717
  • alt-python311-libs_3.11.16-1_arm64.deb
    sha:149a342d7e3c479a4dc9796ac45d5a7f0b216974
  • alt-python311-test_3.11.16-1_arm64.deb
    sha:0978d119b48b2009c6f5125f7079139767ed3e3c
  • alt-python311-tkinter_3.11.16-1_arm64.deb
    sha:a0e9d77ccbfa81076561e1a7e33d256ce7457f28
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.