[CLSA-2026:1790171996] Fix CVE(s): CVE-2026-2297
Type:
security
Severity:
Low
Release date:
2026-09-23 14:00:08 UTC
Description:
* ALTPYTH-616: Update to 3.10.21 * Drop CVE backports included in upstream 3.10.21: CVE-2026-3644, CVE-2026-4224, CVE-2026-4519, CVE-2026-4786, CVE-2026-6100, CVE-2026-9669, CVE-2026-41080, CVE-2026-15308, CVE-2025-13462, CVE-2026-8328, CVE-2026-7774, CVE-2026-1502, CVE-2026-3276, CVE-2026-0864, CVE-2026-11972, CVE-2026-11940, CVE-2026-6879 * debian/patches/CVE-2026-7210.patch: re-anchor the Include/pyexpat.h hunk onto the 3.10.21 PyExpat_CAPI layout, which inserted the SetBillionLaughsAttackProtection* members before the end-of-struct sentinel, so the patch applies with --fuzz=0 instead of relying on the builder's --fuzz=2. No functional change: the new SetHashSalt16Bytes member still lands last in the struct (the expat >= 2.4.0 runtime requirement added on the RPM side is not needed here -- Debian/Ubuntu builds use --without-system-expat)
CVEs fixed:
Updated packages:
  • alt-python310_3.10.21-1_amd64.deb
    sha:2ffe6a9ad32893ce0726f55893ad90230da6a0e5
  • alt-python310-debug_3.10.21-1_amd64.deb
    sha:59d3465dd762ef018fdf654af86a02f168371032
  • alt-python310-devel_3.10.21-1_amd64.deb
    sha:390c33bbe922c33ac58852f05e252784e78f3046
  • alt-python310-idle_3.10.21-1_amd64.deb
    sha:1163242af3bdbd9c55a7e0db3eec6c74675ef8dc
  • alt-python310-libs_3.10.21-1_amd64.deb
    sha:03b7383d5f03fef5ec1417314198b077cb71ca2d
  • alt-python310-test_3.10.21-1_amd64.deb
    sha:92b1a253689039f3b95d332a1af044658d88f206
  • alt-python310-tkinter_3.10.21-1_amd64.deb
    sha:d7eaff024f81aa39d0d513bd12f6a58a9b9efca5
  • alt-python310_3.10.21-1_arm64.deb
    sha:190e805e13fc5e07c0d0f5d54c00b632c5205593
  • alt-python310-debug_3.10.21-1_arm64.deb
    sha:db8395a45cf0e86c56b393616393ef3423964040
  • alt-python310-devel_3.10.21-1_arm64.deb
    sha:4c686791111b758b9aaba8b391383ff4ea6fc74c
  • alt-python310-idle_3.10.21-1_arm64.deb
    sha:fa1ddcccbe3d0f1d8b33e6e424cca88b9a18400e
  • alt-python310-libs_3.10.21-1_arm64.deb
    sha:356f122f94ffe7f08cf3a32643f320789c2a0963
  • alt-python310-test_3.10.21-1_arm64.deb
    sha:f28e248bcb55d4dc90deb1a71d2404a3de16c5ca
  • alt-python310-tkinter_3.10.21-1_arm64.deb
    sha:98ba46af25b9b35c4b69b9e3d7073264c2f1bcc8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.