Release date:
2026-07-23 12:17:22 UTC
Description:
* SECURITY UPDATE: quadratic-complexity CPU DoS in incremental HTML parsing
- debian/patches/CVE-2026-15308.patch: port of cpython gh-153030
(GH-153031). HTMLParser.feed() (Lib/HTMLParser.py) previously
concatenated new data onto the unparsed buffer and re-scanned it from
the start on every call, so feeding an unterminated construct in many
small chunks was quadratic. New data is now accumulated in a list and
only joined and parsed once enough has piled up; close() flushes the
pending buffer.
- CVE-2026-15308
Updated packages:
-
alt-python27_2.7.18-25_amd64.deb
sha:a905c159db9fc651fefa973b2ca1d579ba3043c2
-
alt-python27-debug_2.7.18-25_amd64.deb
sha:aee7ef5ce0f01b83e79ddf8ea261207dedde731d
-
alt-python27-devel_2.7.18-25_amd64.deb
sha:06ff4db675abc99e6e8c4ade3c8d881cdc33fe89
-
alt-python27-idle_2.7.18-25_amd64.deb
sha:95e8cbac05bd2b6c03485766fe76ba7d4ec7ee3d
-
alt-python27-libs_2.7.18-25_amd64.deb
sha:6daa00ef619fbf9693f116c78d06f4ce214772c5
-
alt-python27-test_2.7.18-25_amd64.deb
sha:ea765b880528e252b4b2db52c8c5243b982dc396
-
alt-python27-tkinter_2.7.18-25_amd64.deb
sha:40de4496b7a83a8ffd706633117bfa2cfa97339b
-
alt-python27-tools_2.7.18-25_amd64.deb
sha:4ade48f124f3d058db8ff7aaf004be3b30e27ffe
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
