Release date:
2026-07-23 13:08:42 UTC
Description:
* SECURITY UPDATE: quadratic-complexity CPU DoS in incremental HTML parsing
- debian/patches/CVE-2026-15308.patch: port of cpython gh-153030
(GH-153031). HTMLParser.feed() (Lib/HTMLParser.py) previously
concatenated new data onto the unparsed buffer and re-scanned it from
the start on every call, so feeding an unterminated construct in many
small chunks was quadratic. New data is now accumulated in a list and
only joined and parsed once enough has piled up; close() flushes the
pending buffer.
- CVE-2026-15308
Updated packages:
-
alt-python27_2.7.18-25_amd64.deb
sha:19c8f39b3bed0034aea3967b0b61235a9b973d24
-
alt-python27-debug_2.7.18-25_amd64.deb
sha:7a875c0fceb6b6c8226d8afeb5bf8c23ae2dae02
-
alt-python27-devel_2.7.18-25_amd64.deb
sha:08ef118f687926a21fa2fe0f976acf8f98cdb082
-
alt-python27-idle_2.7.18-25_amd64.deb
sha:13fb7d79ead951ce40a3c54c000502e208061128
-
alt-python27-libs_2.7.18-25_amd64.deb
sha:1696f4f4ea6d5cf5c84a46dc58254dc27e22ab97
-
alt-python27-test_2.7.18-25_amd64.deb
sha:12ce708621cb2beda448b6ddc344091953cc5d65
-
alt-python27-tkinter_2.7.18-25_amd64.deb
sha:bba209d6938fe737f34ad03f0e3bf29d53632053
-
alt-python27-tools_2.7.18-25_amd64.deb
sha:0aa118c9fb797b04d9e85cfc1eb1048be694a74c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
