Malicious code in py2ops (PyPI)

The package installs a console command named python2 pyops.cli:main, so it runs when someone types python2. On first run register in cli.py POSTs the hostname and OS to a space-z.ai server and keeps the returned apiKey in /.python2/config.json. Bare python2 is a real REPL that reads input with th...

Malicious code in py2ops (PyPI)

The package installs a console command named python2 pyops.cli:main, so it runs when someone types python2. On first run register in cli.py POSTs the hostname and OS to a space-z.ai server and keeps the returned apiKey in /.python2/config.json. Bare python2 is a real REPL that reads input with th...

MAL-2026-17807 Malicious code in py2ops (PyPI)

The package installs a console command named python2 pyops.cli:main, so it runs when someone types python2. On first run register in cli.py POSTs the hostname and OS to a space-z.ai server and keeps the returned apiKey in /.python2/config.json. Bare python2 is a real REPL that reads input with th...

CentOS Linux 8.5 [TuxCare] Security Update: python2 / python2-debug / python2-devel / python2-libs / etc (CENTOS8.5:CLSA-2026:1791521362)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791521362 advisory. - A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context...

CentOS Linux 8.4 [TuxCare] Security Update: python2 / python2-debug / python2-devel / python2-libs / etc (CENTOS8.4:CLSA-2026:1781190400)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1781190400 advisory. - xml.parsers.expat and xml.etree.ElementTree use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML documen...

CentOS Linux 8.4 [TuxCare] Security Update: python2 / python2-debug / python2-devel / python2-libs / etc (CENTOS8.4:CLSA-2026:1769420040)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1769420040 advisory. - When building nested elements using xml.dom.minidom methods such as appendChild that have a dependency on clearidcache the algorithm is...

Rocky Linux 8.6 [CIQ] Security Update: python2-funcsigs Multiple Vulnerabilities (ciqsa-2026_0167)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260167 advisory. This advisory aggregates security fixes for the python-funcsigs SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-45061,...

Rocky Linux 8.6 [CIQ] Security Update: python2-coverage / python2-coverage-debuginfo Multiple Vulnerabilities (ciqsa-2026_0162)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260162 advisory. This advisory aggregates security fixes for the python-coverage SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-45061,...

Rocky Linux 8.6 [CIQ] Security Update: python2-Cython / python2-Cython-debuginfo Multiple Vulnerabilities (ciqsa-2026_0163)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260163 advisory. This advisory aggregates security fixes for the Cython SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-45061,...

Rocky Linux 8.6 [CIQ] Security Update: python2-urllib3 Multiple Vulnerabilities (ciqsa-2026_0194)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260194 advisory. This advisory aggregates security fixes for the python-urllib3 SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-45061,...

Rocky Linux 8.6 [CIQ] Security Update: python2-setuptools_scm Multiple Vulnerabilities (ciqsa-2026_0191)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260191 advisory. This advisory aggregates security fixes for the python-setuptoolsscm SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681,...

CentOS Linux 8 [TuxCare] Security Update: python2 / python2-debug / python2-devel / python2-libs / etc (CENTOS-STREAM8:CLSA-2026:1784798441)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1784798441 advisory. - The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations...

Rocky Linux 8.6 [CIQ] Security Update: python2-pygments Multiple Vulnerabilities (ciqsa-2026_0180)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260180 advisory. This advisory aggregates security fixes for the python-pygments SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-45061,...

Rocky Linux 8.6 [CIQ] Security Update: babel / python2-babel Multiple Vulnerabilities (ciqsa-2026_0004)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260004 advisory. This advisory aggregates security fixes for the babel SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-45061,...

CentOS Linux 8.4 [TuxCare] Security Update: python2 / python2-debug / python2-devel / python2-libs / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1789992787)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1789992787 advisory. - When using the tarfile module with a file opened in streaming mode mode=r| the tarfile module did not properly handle EOF, making...

Rocky Linux 8.6 [CIQ] Security Update: python2-markupsafe Multiple Vulnerabilities (ciqsa-2026_0172)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260172 advisory. This advisory aggregates security fixes for the python-markupsafe SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-4506...

Rocky Linux 8.6 [CIQ] Security Update: python2-scipy / python2-scipy-debuginfo / scipy-debugsource Multiple Vulnerabilities (ciqsa-2026_0189)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260189 advisory. This advisory aggregates security fixes for the scipy SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-45061,...

Rocky Linux 8.6 [CIQ] Security Update: python2-backports-ssl_match_hostname Multiple Vulnerabilities (ciqsa-2026_0158)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260158 advisory. This advisory aggregates security fixes for the python-backports-sslmatchhostname SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-3268...

CentOS Linux 8.5 [TuxCare] Security Update: python2 / python2-debug / python2-devel / python2-libs / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1782979680)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1782979680 advisory. - The tarfile module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member...

Rocky Linux 8.6 [CIQ] Security Update: python-nose-docs / python2-nose Multiple Vulnerabilities (ciqsa-2026_0174)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260174 advisory. This advisory aggregates security fixes for the python-nose SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-45061,...