[CLSA-2026:1793624428] Fix CVE(s): CVE-2026-49476, CVE-2026-49477, CVE-2026-85999, CVE-2026-86000

Type:

security

Severity:

Important

Release date:

2026-11-02 13:00:39 UTC

Description:

   * SECURITY UPDATE: ReDoS on unterminated quoted attribute value
     - debian/patches/CVE-2026-49477.patch: ReDoS on unterminated quoted attribute value
     - CVE-2026-49477
   * SECURITY UPDATE: ReDoS in identifier pattern
     - debian/patches/CVE-2026-86000.patch: ReDoS in identifier pattern
     - CVE-2026-86000
   * SECURITY UPDATE: ReDoS when trimming trailing whitespace and comments
     - debian/patches/CVE-2026-85999.patch: ReDoS when trimming trailing whitespace and comments
     - CVE-2026-85999
   * SECURITY UPDATE: unbounded memory on excessive selector lists
     - debian/patches/CVE-2026-49476.patch: unbounded memory on excessive selector lists
     - CVE-2026-49476

CVEs fixed:

Updated packages:

python3-soupsieve_2.2.1-1+tuxcare.els1_all.deb
sha:34449338b46a857c8e44644c7dc0f4bbe5909b38

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.