Release date:
2026-07-23 10:49:45 UTC
Description:
* SECURITY UPDATE: quadratic-complexity CPU DoS in incremental HTML parsing
- debian/patches/CVE-2026-15308.patch: port of cpython gh-153030
(GH-153031). HTMLParser.feed() (Lib/HTMLParser.py) previously
concatenated new data onto the unparsed buffer and re-scanned it from
the start on every call, so feeding an unterminated construct in many
small chunks was quadratic. New data is now accumulated in a list and
only joined and parsed once enough has piled up; close() flushes the
pending buffer.
- CVE-2026-15308
Updated packages:
-
alt-python27_2.7.18-25_amd64.deb
sha:303e6a76f009a277c07dec761807e0369b7e1b04
-
alt-python27-debug_2.7.18-25_amd64.deb
sha:856224c27269b1b5f58988c64843b513a7a47cb2
-
alt-python27-devel_2.7.18-25_amd64.deb
sha:4f466c1fa96b9e13710df4620e55d9899d8efbf6
-
alt-python27-idle_2.7.18-25_amd64.deb
sha:13fb7d79ead951ce40a3c54c000502e208061128
-
alt-python27-libs_2.7.18-25_amd64.deb
sha:eae2ac63ad1023a5a579a93628d6eecc185ce1b3
-
alt-python27-test_2.7.18-25_amd64.deb
sha:1d4ab6904011c17d3b25aaf9c6f2d11eb23faf55
-
alt-python27-tkinter_2.7.18-25_amd64.deb
sha:5481011f8c9aa5edcc3b9d2e83d22591ae2a62c8
-
alt-python27-tools_2.7.18-25_amd64.deb
sha:0aa118c9fb797b04d9e85cfc1eb1048be694a74c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
