CLSA-2026-1783853491
Update of python
No scoreFix available
- make the weak XML_SetHashSalt16Bytes reference in pyexpat unversioned (.symver): linked against the tuxcare libexpat it was stamped with the EXPAT_2_0_1_RH version node, and on el6 glibc 2.12 a versioned reference whose provider lacks the symbol is a fatal relocation error even for a weak symbol, so pyexpat.so failed to load (breaking yum with "ImportError: No module named cElementTree") on hosts whose /lib64/libexpat.so.1 predates the els10 backport, e.g. a third-party expat package
- drop the runtime Requires on expat >= 2.0.1-13.el6_8.tuxcare.els10: a third-party package providing a higher expat NEVRA satisfies it without providing the ABI, and with the truly-weak unversioned reference pyexpat degrades gracefully to XML_SetHashSalt when the symbol is absent
What each source reports
OSV No score
Update of python
- make the weak XML_SetHashSalt16Bytes reference in pyexpat unversioned (.symver): linked against the tuxcare libexpat it was stamped with the EXPAT_2_0_1_RH version node, and on el6 glibc 2.12 a versioned reference whose provider lacks the symbol is a fatal relocation error even for a weak symbol, so pyexpat.so failed to load (breaking yum with "ImportError: No module named cElementTree") on hosts whose /lib64/libexpat.so.1 predates the els10 backport, e.g. a third-party expat package
- drop the runtime Requires on expat >= 2.0.1-13.el6_8.tuxcare.els10: a third-party package providing a higher expat NEVRA satisfies it without providing the ABI, and with the truly-weak unversioned reference pyexpat degrades gracefully to XML_SetHashSalt when the symbol is absent
- Record
CLSA-2026-1783853491- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pythonTuxCare:CentOS:6 |
before 2.6.6-70.el6.tuxcare.els25 | 2.6.6-70.el6.tuxcare.els25 |
python-develTuxCare:CentOS:6 |
before 2.6.6-70.el6.tuxcare.els25 | 2.6.6-70.el6.tuxcare.els25 |
python-libsTuxCare:CentOS:6 |
before 2.6.6-70.el6.tuxcare.els25 | 2.6.6-70.el6.tuxcare.els25 |
python-testTuxCare:CentOS:6 |
before 2.6.6-70.el6.tuxcare.els25 | 2.6.6-70.el6.tuxcare.els25 |
python-toolsTuxCare:CentOS:6 |
before 2.6.6-70.el6.tuxcare.els25 | 2.6.6-70.el6.tuxcare.els25 |
tkinterTuxCare:CentOS:6 |
before 2.6.6-70.el6.tuxcare.els25 | 2.6.6-70.el6.tuxcare.els25 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CLSA-2026-1783853491 is a vulnerability with no CVSS score yet in python, published July 12, 2026. No source lists public exploit code. Fixed in python 2.6.6-70.el6.tuxcare.els25.