{"id":"CLSA-2026-1784188935","summary":"Fix CVE(s): CVE-2026-15308","details":"   * SECURITY UPDATE: CPU denial-of-service in html.parser.HTMLParser via\n     repeated unterminated markup declarations\n     - debian/patches/CVE-2026-15308.patch: accumulate incrementally fed\n       data in a list and only join and rescan it once a growing threshold\n       is reached, so an unterminated construct (tag, comment, PI, doctype,\n       CDATA, RAWTEXT element) spread across many feed() calls no longer\n       makes both the buffer concatenation and the rescan quadratic in the\n       input size (backport of upstream commit bcf98ddbc40e, gh-153030 /\n       GH-153031).\n     - CVE-2026-15308","modified":"2026-10-26T09:31:52.512960310Z","published":"2026-07-16T08:02:39Z","upstream":["CVE-2026-15308"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1784188935.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15308"}],"affected":[{"package":{"name":"idle-python3.7","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/idle-python3.7?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"}},{"package":{"name":"libpython3.7","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libpython3.7?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"}},{"package":{"name":"libpython3.7-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libpython3.7-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"}},{"package":{"name":"libpython3.7-minimal","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libpython3.7-minimal?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"}},{"package":{"name":"libpython3.7-stdlib","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libpython3.7-stdlib?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"}},{"package":{"name":"libpython3.7-testsuite","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libpython3.7-testsuite?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"}},{"package":{"name":"python3.7","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/python3.7?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"}},{"package":{"name":"python3.7-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/python3.7-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"}},{"package":{"name":"python3.7-doc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/python3.7-doc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"}},{"package":{"name":"python3.7-examples","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/python3.7-examples?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"}},{"package":{"name":"python3.7-minimal","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/python3.7-minimal?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"}},{"package":{"name":"python3.7-venv","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/python3.7-venv?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"}}],"schema_version":"1.9.0"}