Release date:
2026-07-23 12:46:35 UTC
Description:
* SECURITY UPDATE: quadratic-complexity CPU DoS in incremental HTML parsing
- debian/patches/CVE-2026-15308.patch: port of cpython gh-153030
(GH-153031). HTMLParser.feed() (Lib/HTMLParser.py) previously
concatenated new data onto the unparsed buffer and re-scanned it from
the start on every call, so feeding an unterminated construct in many
small chunks was quadratic. New data is now accumulated in a list and
only joined and parsed once enough has piled up; close() flushes the
pending buffer.
- CVE-2026-15308
Updated packages:
-
alt-python27_2.7.18-25_amd64.deb
sha:fd49d33e018e9d92200438df96655b7041b8f923
-
alt-python27-debug_2.7.18-25_amd64.deb
sha:ac3021919e517f97b73c468d9b631f31d2535649
-
alt-python27-devel_2.7.18-25_amd64.deb
sha:4a55d559f08c810dfb08c3dc4a18246498c9304a
-
alt-python27-idle_2.7.18-25_amd64.deb
sha:13fb7d79ead951ce40a3c54c000502e208061128
-
alt-python27-libs_2.7.18-25_amd64.deb
sha:a5d10de81c552e1f369fa939e1e94d1a89f2fb35
-
alt-python27-test_2.7.18-25_amd64.deb
sha:d541121e29d37c6a9c15baf8300900afc9ac6cfb
-
alt-python27-tkinter_2.7.18-25_amd64.deb
sha:51a728b6325200640102b48f08629ca64c5bab99
-
alt-python27-tools_2.7.18-25_amd64.deb
sha:0aa118c9fb797b04d9e85cfc1eb1048be694a74c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
