Release date:
2026-07-23 13:38:27 UTC
Description:
* SECURITY UPDATE: quadratic-complexity CPU DoS in incremental HTML parsing
- debian/patches/CVE-2026-15308.patch: port of cpython gh-153030
(GH-153031). HTMLParser.feed() (Lib/HTMLParser.py) previously
concatenated new data onto the unparsed buffer and re-scanned it from
the start on every call, so feeding an unterminated construct in many
small chunks was quadratic. New data is now accumulated in a list and
only joined and parsed once enough has piled up; close() flushes the
pending buffer.
- CVE-2026-15308
Updated packages:
-
alt-python27_2.7.18-25_amd64.deb
sha:a569bb1fead69c190f41ec8b960b81554946d361
-
alt-python27-debug_2.7.18-25_amd64.deb
sha:b592ca7575257ad957de99e1a9c07d2302d9a6b3
-
alt-python27-devel_2.7.18-25_amd64.deb
sha:34b0701d66868df41dc9bf8f23cec1f3b3b0021e
-
alt-python27-idle_2.7.18-25_amd64.deb
sha:95682ef27d8b7226f6cfd0b0ea0ff23c94cc02d7
-
alt-python27-libs_2.7.18-25_amd64.deb
sha:032f745b05c63d2910ac75617ccfc4e797ad4320
-
alt-python27-test_2.7.18-25_amd64.deb
sha:89a2eea35e96b630fe5cf917eef4e53a4a4f9510
-
alt-python27-tkinter_2.7.18-25_amd64.deb
sha:78efd14314fb6d4a726cb26638ac473ad3912fd5
-
alt-python27-tools_2.7.18-25_amd64.deb
sha:b2d6cd6c65f6915ae49084aadb693bdf8e28a314
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
