Release date:
2026-07-23 09:44:48 UTC
Description:
* SECURITY UPDATE: quadratic-complexity CPU DoS in incremental HTML parsing
- debian/patches/CVE-2026-15308.patch: port of cpython gh-153030
(GH-153031). HTMLParser.feed() (Lib/HTMLParser.py) previously
concatenated new data onto the unparsed buffer and re-scanned it from
the start on every call, so feeding an unterminated construct in many
small chunks was quadratic. New data is now accumulated in a list and
only joined and parsed once enough has piled up; close() flushes the
pending buffer.
- CVE-2026-15308
Updated packages:
-
alt-python27_2.7.18-25_amd64.deb
sha:16927702a22b6b00ef152833001b453a6024b6c3
-
alt-python27-debug_2.7.18-25_amd64.deb
sha:e5a459200ad51d1c7031a8e92e8d08c0b43ed305
-
alt-python27-devel_2.7.18-25_amd64.deb
sha:1c182ed2097bd20217681b75fcba94a0f420d568
-
alt-python27-idle_2.7.18-25_amd64.deb
sha:13fb7d79ead951ce40a3c54c000502e208061128
-
alt-python27-libs_2.7.18-25_amd64.deb
sha:07c997c704be6ff9aa24ca5dcf33a8dc9a578d66
-
alt-python27-test_2.7.18-25_amd64.deb
sha:079aaea8d93c64265361906245dbc8e0bde9c66d
-
alt-python27-tkinter_2.7.18-25_amd64.deb
sha:e5fd1d550d5f9bac4534154845d5f21bb920b858
-
alt-python27-tools_2.7.18-25_amd64.deb
sha:0aa118c9fb797b04d9e85cfc1eb1048be694a74c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
