CVE-2026-7210: seed Expat with 16 bytes of hash salt via
XML_SetHashSalt16Bytes when the linked libexpat exposes it, fixing the
hash-flooding entropy gap in pyexpat and xml.etree.ElementTree
require expat >= 2.5.0-1.el9_2.tuxcare.els12 (CVE-2026-41080,
XML_SetHashSalt16Bytes) so the runtime mitigation is guaranteed in effect