{"id":"CLSA-2026-1783853491","aliases":[],"status":"published","title":"Update of python","description":"- make the weak XML_SetHashSalt16Bytes reference in pyexpat\n  unversioned (.symver): linked against the tuxcare libexpat it was stamped\n  with the EXPAT_2_0_1_RH version node, and on el6 glibc 2.12 a versioned\n  reference whose provider lacks the symbol is a fatal relocation error even\n  for a weak symbol, so pyexpat.so failed to load (breaking yum with\n  \"ImportError: No module named cElementTree\") on hosts whose\n  /lib64/libexpat.so.1 predates the els10 backport, e.g. a third-party\n  expat package\n- drop the runtime Requires on expat \u003e= 2.0.1-13.el6_8.tuxcare.els10:\n  a third-party package providing a higher expat NEVRA satisfies it without\n  providing the ABI, and with the truly-weak unversioned reference pyexpat\n  degrades gracefully to XML_SetHashSalt when the symbol is absent","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-07-12T19:17:08Z","modified":"2026-10-26T09:31:39Z","fixes":[{"ecosystem":"TuxCare:CentOS:6","package":"python","fixed_in":["2.6.6-70.el6.tuxcare.els25"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"python-devel","fixed_in":["2.6.6-70.el6.tuxcare.els25"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"python-libs","fixed_in":["2.6.6-70.el6.tuxcare.els25"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"python-test","fixed_in":["2.6.6-70.el6.tuxcare.els25"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"python-tools","fixed_in":["2.6.6-70.el6.tuxcare.els25"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"tkinter","fixed_in":["2.6.6-70.el6.tuxcare.els25"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els25"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els25"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els25"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els25"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els25"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els25"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1783853491.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2026-1783853491","title":"Update of python","description":"- make the weak XML_SetHashSalt16Bytes reference in pyexpat\n  unversioned (.symver): linked against the tuxcare libexpat it was stamped\n  with the EXPAT_2_0_1_RH version node, and on el6 glibc 2.12 a versioned\n  reference whose provider lacks the symbol is a fatal relocation error even\n  for a weak symbol, so pyexpat.so failed to load (breaking yum with\n  \"ImportError: No module named cElementTree\") on hosts whose\n  /lib64/libexpat.so.1 predates the els10 backport, e.g. a third-party\n  expat package\n- drop the runtime Requires on expat \u003e= 2.0.1-13.el6_8.tuxcare.els10:\n  a third-party package providing a higher expat NEVRA satisfies it without\n  providing the ABI, and with the truly-weak unversioned reference pyexpat\n  degrades gracefully to XML_SetHashSalt when the symbol is absent","status":"published","published":"2026-07-12T19:17:08Z","modified":"2026-10-26T09:31:39.407943925Z","updated_at":"2026-11-02T15:43:46.151924Z"}]}}