44 matches found
SUSE SLED15: libpython3_13-1_0 / python313 / python313-base / python313-curses / etc (SUSE-SU-2026:0642-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0642-1 advisory. Update to Python 3.13.12 - CVE-2026-0672: Fixed a HTTP header injection via user-controlled cookie values and...
Fedora: Security Advisory (FEDORA-2026-b1b37b00ef)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2026:0612-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2026-27ce708600)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2026:0613-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for python3
This update for python3 fixes the following issues: CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters bsc1257029. CVE-2026-0672: HTTP header injection via user-controlled cookie values and parameters when using...
Security update for python313
This update for python313 fixes the following issues: Update to Python 3.13.12 CVE-2026-0672: Fixed a HTTP header injection via user-controlled cookie values and parameters when using http.cookies.Morsel. bsc1257031 CVE-2026-0865: Fixed a bug where a user-controlled header containing newlines can...
Fedora: Security Advisory (FEDORA-2026-9ad2d11c1f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
python311-3.11.14-4.1 on GA media (moderate)
python311-3.11.14-4.1 on GA media Announcement ID: openSUSE-SU-2026:10221-1 Rating: moderate Cross-References: CVE-2025-11468 CVE-2025-12781 CVE-2025-15282 CVE-2025-15366 CVE-2025-15367 CVE-2026-0672 CVE-2026-0865 CVSS scores: CVE-2025-11468 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N...
Fedora: Security Advisory (FEDORA-2026-c8b3418f91)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 43 : mingw-python3 (2026-e0c0434efb)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e0c0434efb advisory. Backport fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299 Tenable has extracted the preceding description block...
Fedora 42 : mingw-python3 (2026-c8b3418f91)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c8b3418f91 advisory. Backport fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299 Tenable has extracted the preceding description block...
CVE-2025-15282 vulnerabilities
Vulnerabilities for packages: python...
[SECURITY] [DLA 4455-1] python3.9 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4455-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura January 25, 2026 https://wiki.debian.org/LTS -...
Debian dla-4455 : idle-python3.9 - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4455 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4455-1 [email protected]...
CVE-2025-15282
Missing newline filtering has been discovered in Python. User-controlled data URLs parsed by urllib.request.DataHandler allow injecting headers through newlines in the data URL mediatype. Mitigation Mitigation for this issue is either not available or the currently available options do not meet t...
CVE-2025-15282
creationtimestamp| type| source ---|---|--- 2026-01-21 16:30:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mcx3sisa3x2n 2026-03-07 12:01:32+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mghrr5oqef2r 2026-03-18 00:00:00+00:00| seen|...
CVE-2025-15282 Header injection via newlines in data URL mediatype
User-controlled data URLs parsed by urllib.request.DataHandler allow injecting headers through newlines in the data URL mediatype...
