CLSA-2026-1784188935

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1784188935
Upstream
Published
2026-07-16T08:02:39Z
Modified
2026-10-26T09:31:52Z
Summary
Fix CVE(s): CVE-2026-15308
Details
  • SECURITY UPDATE: CPU denial-of-service in html.parser.HTMLParser via repeated unterminated markup declarations
    • debian/patches/CVE-2026-15308.patch: accumulate incrementally fed data in a list and only join and rescan it once a growing threshold is reached, so an unterminated construct (tag, comment, PI, doctype, CDATA, RAWTEXT element) spread across many feed() calls no longer makes both the buffer concatenation and the rescan quadratic in the input size (backport of upstream commit bcf98ddbc40e, gh-153030 / GH-153031).
    • CVE-2026-15308
References

Affected packages

TuxCare:Debian:10
idle-python3.7

Package

Name
idle-python3.7
Purl
pkg:deb/tuxcare/idle-python3.7?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.7.3-2+deb10u7+tuxcare.els6

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"
libpython3.7

Package

Name
libpython3.7
Purl
pkg:deb/tuxcare/libpython3.7?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.7.3-2+deb10u7+tuxcare.els6

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"
libpython3.7-dev

Package

Name
libpython3.7-dev
Purl
pkg:deb/tuxcare/libpython3.7-dev?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.7.3-2+deb10u7+tuxcare.els6

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"
libpython3.7-minimal

Package

Name
libpython3.7-minimal
Purl
pkg:deb/tuxcare/libpython3.7-minimal?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.7.3-2+deb10u7+tuxcare.els6

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"
libpython3.7-stdlib

Package

Name
libpython3.7-stdlib
Purl
pkg:deb/tuxcare/libpython3.7-stdlib?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.7.3-2+deb10u7+tuxcare.els6

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"
libpython3.7-testsuite

Package

Name
libpython3.7-testsuite
Purl
pkg:deb/tuxcare/libpython3.7-testsuite?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.7.3-2+deb10u7+tuxcare.els6

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"
python3.7

Package

Name
python3.7
Purl
pkg:deb/tuxcare/python3.7?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.7.3-2+deb10u7+tuxcare.els6

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"
python3.7-dev

Package

Name
python3.7-dev
Purl
pkg:deb/tuxcare/python3.7-dev?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.7.3-2+deb10u7+tuxcare.els6

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"
python3.7-doc

Package

Name
python3.7-doc
Purl
pkg:deb/tuxcare/python3.7-doc?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.7.3-2+deb10u7+tuxcare.els6

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"
python3.7-examples

Package

Name
python3.7-examples
Purl
pkg:deb/tuxcare/python3.7-examples?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.7.3-2+deb10u7+tuxcare.els6

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"
python3.7-minimal

Package

Name
python3.7-minimal
Purl
pkg:deb/tuxcare/python3.7-minimal?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.7.3-2+deb10u7+tuxcare.els6

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"
python3.7-venv

Package

Name
python3.7-venv
Purl
pkg:deb/tuxcare/python3.7-venv?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.7.3-2+deb10u7+tuxcare.els6

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784188935.json"