982 matches found
RHSA-2026:52400 Red Hat Security Advisory: python3 security update
Bulletin has no description...
Astra Linux – Vulnerability in Python 3.11
When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model, a C stack overflow occurs...
Astra Linux – Vulnerability in Python 3.11
The import hook in CPython that handles legacy .pyc files SourcelessFileLoader is incorrectly handled in FileLoader a base class, and therefore does not use io.opencode to read the .pyc files. As a result, the sys.audit handlers for this audit event do not trigger...
Astra Linux – Vulnerability in Python 3.11
The email module, specifically the “BytesGenerator” class, did not properly quote newlines for email headers when serializing an email message. This issue occurs only when using “LiteralHeader” to write headers that do not follow email folding rules. The new behavior will reject incorrectly folde...
Astra Linux – Vulnerability in Python 3.11
When loading a plist file, the plistlib module reads data in a size specified by the file itself. This means that a malicious file can cause out-of-memory OOM and denial-of-service DoS issues...
Astra Linux – Vulnerability in Python 3.11
The poplib module, when a user-controlled command is passed to it, can have additional commands injected using newlines. Mitigation rejects commands that contain control characters...
Astra Linux – Vulnerability in Python 3.11
User-controlled data URLs parsed by urllib.request.DataHandler allow injecting headers through newlines in the data URL’s media type...
Astra Linux – Vulnerability in Python 3.11
The webbrowser.open API accepts URLs with leading hyphens, which can be treated as command-line options for certain web browsers. However, the new behavior disallows the use of leading hyphens. It is recommended that users sanitize URLs before passing them to webbrowser.open...
Astra Linux – Vulnerability in Python 3.11
The “tarfile” module will still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even when processing multi-block members such as GNUTYPELONGNAME or GNUTYPELONGLINK. This could lead to a crafted tar archive being misinterpreted by the tarfile module compared to other implementations...
Astra Linux – Vulnerability in Python 3.11
When using http.cookies.Morsel, user-controlled cookie values and parameters may allow the injection of HTTP headers into messages. The patch rejects all control characters within cookie names, values, and parameters...
[SECURITY] Fedora 43 Update: python3.12-3.12.13-6.fc43
Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...
ROOT-OS-DEBIAN-11-CVE-2026-11972 CVE-2026-11972 in python3.9 - Patched by Root
Root has patched CVE-2026-11972 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-15308 CVE-2026-15308 in python3.13 - Patched by Root
Root has patched CVE-2026-15308 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...
OESA-2026-3236 python-Keras security update
Keras is a high-level neural networks API for Python. Security Fixes: Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in keras/src/utils/fileutils.py. The functions filtersafetarinfos and filtersafezipinfos validate archive membe...
RHSA-2026:50816 Red Hat Security Advisory: python3 security update
Bulletin has no description...
RHSA-2026:50771 Red Hat Security Advisory: python3.12 security update
Bulletin has no description...
ROOT-OS-DEBIAN-12-CVE-2026-11972 CVE-2026-11972 in python3.11 - Patched by Root
Root has patched CVE-2026-11972 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-4360 CVE-2026-4360 in python3.11 - Patched by Root
Root has patched CVE-2026-4360 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...