218 matches found
BIT-JAVA-2025-32414
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API Python bindings because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters...
PT-2026-37836
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API Python bindings because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters...
PT-2026-38043
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API Python bindings because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters...
[SECURITY] Fedora 44 Update: sip6-6.15.3-1.fc44
SIP is a collection of tools that makes it very easy to create Python bindings for C and C++ libraries. It was originally developed in 1998 to create PyQt, the Python bindings for the Qt toolkit, but can be used to create bindings for any C or C++ library. For example it is also used to generate...
[SECURITY] Fedora 42 Update: maturin-1.9.6-4.fc42
Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...
[SECURITY] Fedora 43 Update: maturin-1.9.6-5.fc43
Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...
[SECURITY] Fedora 42 Update: python-ujson-5.12.0-1.fc42
UltraJSON is an ultra fast JSON encoder and decoder written in pure C with bindings for Python...
[SECURITY] Fedora 44 Update: python-ujson-5.12.0-1.fc44
UltraJSON is an ultra fast JSON encoder and decoder written in pure C with bindings for Python...
CVE-2026-32875
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Versions 5.10 through 5.11.0 are vulnerable to buffer overflow or infinite loop through large indent handling. ujson.dumps crashes the Python interpreter segmentation fault when the product of the indent...
[SECURITY] [DLA 4482-1] ceph security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4482-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 17, 2026 https://wiki.debian.org/LTS -...
Astra Linux – Vulnerability in libxml2
In libxml2 versions before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API Python bindings due to an incorrect return value. This issue occurs in the xmlPythonFileRead and xmlPythonFileReadRaw functions, caused by a discrepancy between bytes and characters...
MiracleLinux 3 : gnome-python2-extras-2.14.2-7.AXS3 (AXSA:2010-371:01)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2010-371:01 advisory. The gnome-python-extra package contains the source packages for additional Python bindings for GNOME. It should be used together with gnome-python...
EulerOS Virtualization 2.10.0 : libxml2 (EulerOS-SA-2026-1001)
According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.CVE-2025-27113 libxml2...
Ubuntu: Security Advisory (USN-7896-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Use After Free
Overview OpenEXR is a Python bindings for the OpenEXR image file format Affected versions of this package are vulnerable to Use After Free via the PyObjectStealAttrString function. An attacker can execute arbitrary code or cause a crash by passing a dangling pointer to APIs such as PyLongAsLong o...
[SECURITY] Fedora 43 Update: maturin-1.9.6-1.fc43
Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...
[SECURITY] Fedora 42 Update: python-pyqt6-6.9.0-5.fc42
PyQt6 is Python bindings for Qt6...
TencentOS Server 2: libxml2 (TSSA-2025:0786)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0786 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...
JLSEC-2025-89 In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the...
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API Python bindings because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters...
