CLSA-2026-1782983048

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1782983048.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1782983048
Upstream
Published
2026-07-02T09:04:26Z
Modified
2026-10-26T09:31:50Z
Summary
python2: Fix of 2 CVEs
Details
  • CVE-2026-4224: guard conv_content_model() in pyexpat against unbounded C recursion (C stack overflow) when an Expat parser with a registered ElementDeclHandler parses an inline DTD containing a deeply nested content model, using Py_EnterRecursiveCall/Py_LeaveRecursiveCall
References

Affected packages

TuxCare:CentOS:8.4
python2

Package

Name
python2
Purl
pkg:rpm/tuxcare/python2?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2430+eaf5f37f.tuxcare.els25

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1782983048.json"
python2-debug

Package

Name
python2-debug
Purl
pkg:rpm/tuxcare/python2-debug?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2430+eaf5f37f.tuxcare.els25

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1782983048.json"
python2-devel

Package

Name
python2-devel
Purl
pkg:rpm/tuxcare/python2-devel?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2430+eaf5f37f.tuxcare.els25

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1782983048.json"
python2-libs

Package

Name
python2-libs
Purl
pkg:rpm/tuxcare/python2-libs?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2430+eaf5f37f.tuxcare.els25

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1782983048.json"
python2-test

Package

Name
python2-test
Purl
pkg:rpm/tuxcare/python2-test?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2430+eaf5f37f.tuxcare.els25

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1782983048.json"
python2-tkinter

Package

Name
python2-tkinter
Purl
pkg:rpm/tuxcare/python2-tkinter?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2430+eaf5f37f.tuxcare.els25

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1782983048.json"
python2-tools

Package

Name
python2-tools
Purl
pkg:rpm/tuxcare/python2-tools?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2430+eaf5f37f.tuxcare.els25

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1782983048.json"