python-tornado security update

4.2.1-5.0.3 - Backport fix for CVE-2026-31958 Orabug: 39521310 - Backport fix for CVE-2026-35536 Orabug: 39521310...

Fedora 45 : python3.12 (2026-05338c2e02)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-05338c2e02 advisory. Automatic update for python3.12-3.12.13-6.fc45. Changelog Tue Jul 28 2026 Luk Zachar - 3.12.13-6 - Security fix for CVE-2026-15308 Resolves: rhbz2498688 Tue...

Fedora 45 : python-nh3 / rust-ammonia (2026-48677bc7ac)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-48677bc7ac advisory. - Update the ammonia crate to version 4.1.4. - Rebuild nh3 to apply fixes for RUSTSEC-2026-0193 and RUSTSEC-2026-0213. Tenable has extracted the preceding...

RHEL 10 : python3.12 (RHSA-2026:47939)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47939 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic...

RHEL 8 : python-pillow (RHSA-2026:48021)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:48021 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

PT-2026-76538

This update for python-sqlparse fixes the following issue - Fixed an issue where formatting list of tuples leads to denial of service bsc1268597...

Oracle Linux 10 : vim (ELSA-2026-48650)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-48650 advisory. - RHEL-201113 CVE-2026-59856 vim: potential command execution in PHP omni-completion - RHEL-203857 CVE-2026-59858 vim: arbitrary Ex command execution...

PT-2026-76537

This update for python-sqlparse fixes the following issue - Fixed an issue where formatting list of tuples leads to denial of service bsc1268597...

vim security update

9.1.083-9.0.1.el102.12 - Remove upstream references Orabug: 31197557 2:9.1.083-9.12 - RHEL-201113 CVE-2026-59856 vim: potential command execution in PHP omni-completion 2:9.1.083-9.11 - RHEL-203857 CVE-2026-59858 vim: arbitrary Ex command execution during C omni-completion 2:9.1.083-9.10 -...

vim security update

8.2.2637-26.0.1.el98.13 - Remove upstream references Orabug: 31197557 2:8.2.2637-26.13 - RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution in C omni-completion - RHEL-201197 CVE-2026-59856 vim: potential command execution in PHP omni-completion 2:8.2.2637-26.12 - RHEL-191367...

RockyLinux 9 : vim (RLSA-2026:47982)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47982 advisory. vim: Vim: Denial of Service via stack out-of-bounds write in spellsoundfoldsofo CVE-2026-57455 vim: Vim: Arbitrary code execution via malicious docstrin...

ALSA-2026:48650 Important: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Denial of Service via stack out-of-bounds write in spellsoundfoldsofo CVE-2026-57455 vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion CVE-2026-57456 vim: Vim:...

RHEL 9 : vim (RHSA-2026:47982)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47982 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Denial of Service via stack out-of-bounds...

ALSA-2026:48703 Important: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Denial of Service via stack out-of-bounds write in spellsoundfoldsofo CVE-2026-57455 vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion CVE-2026-57456 vim: Vim:...

Important: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Denial of Service via stack out-of-bounds write in spellsoundfoldsofo CVE-2026-57455 vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion CVE-2026-57456 vim: Vim:...

Security update for python313, python3 (important)

openSUSE security update: security update for python313, python3 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21459-1 Rating: important References: bsc1211301 bsc1258364 bsc1261969 bsc1261970 bsc1262098 bsc1262319 bsc1262654 bsc1263787...

python: Python: Performance degradation in XML processing due to quadratic time complexity

A flaw was found in Python's xml.etree.ElementPath component. This vulnerability can lead to a denial of service DoS when processing specially crafted XML documents. Specifically, certain XPath index predicates used with functions like Element.findall and Element.iterfind can cause the processing...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.12: python3.12-3.12.13-3.8.hum1 aarch64, x8664 python3.12-debug-3.12.13-3.8.hum1 aarch64, x8664 python3.12-devel-3.12.13-3.8.hum1 aarch64, x8664 python3.12-idle-3.12.13-3.8.hum1 aarch64,...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.13: python3.13-3.13.14-1.7.hum1 aarch64, x8664 python3.13-debug-3.13.14-1.7.hum1 aarch64, x8664 python3.13-devel-3.13.14-1.7.hum1 aarch64, x8664 python3.13-freethreading-3.13.14-1.7.hum1...

python: Python: Performance degradation in XML processing due to quadratic time complexity

A flaw was found in Python's xml.etree.ElementPath component. This vulnerability can lead to a denial of service DoS when processing specially crafted XML documents. Specifically, certain XPath index predicates used with functions like Element.findall and Element.iterfind can cause the processing...