Important: python3-tornado

Issue Overview: Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.parseqs in tornado/escape.py without passing maxnumfields. RequestHandler.execute in tornado/web.py parses the...

Exploit for CVE-2026-100382

CVE-2026-100382 - MediaWiki ExternalData extension OS command...

Fedora 43 : mingw-python3 (2026-9359fb439f)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9359fb439f advisory. Update to python-3.11.16. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Updated python3 & python-pip package fixes security vulnerabilities

Please see the references for additional information about vulnerabilities...

MGASA-2026-0455 Updated python3 & python-pip package fixes security vulnerabilities

Please see the references for additional information about vulnerabilities...

Fedora 45 : mingw-python3 (2026-19a92359f8)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-19a92359f8 advisory. Update to python-3.11.16. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 44 : mingw-python3 (2026-cee8eac8cc)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-cee8eac8cc advisory. Update to python-3.11.16. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

OESA-2026-4012 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

OESA-2026-4011 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

OESA-2026-4010 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

Critical: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: openshell: openshell-0.0.116-0.2.hum1 aarch64, x8664 openshell-gateway-0.0.116-0.2.hum1 aarch64, x8664 python3-openshell-0.0.116-0.2.hum1 aarch64, x8664 openshell-0.0.116-0.2.hum1.src src...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-054053)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054053 advisory. A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using inttext, a system could take 50ms to parse an int string...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-054049)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054049 advisory. Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple / at the beginning of URI path which may...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2023-002655)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002655 advisory. An issue was discovered in comparedigest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-090113)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090113 advisory. In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because procpax lacks...

SUSE SLES12: libpython3_4m1_0 / libpython3_4m1_0-32bit / python3 / python3-base / etc (SUSE-SU-2026:4060-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4060-1 advisory. Security issues fixed: - CVE-2026-13346: arbitrary file installation via malicious package indexes bsc1273091. Non security issue...

OPENSUSE-SU-2026:11840-1 python3-pytest-ansible-26.8.0-1.1 on GA media

These are all security issues fixed in the python3-pytest-ansible-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed...

EulerOS Virtualization 2.10.1 : python3 (EulerOS-SA-2026-3852)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Use-after-free UAF was possible in the lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile when a memory allocation fail...

EulerOS Virtualization 2.10.0 : python3 (EulerOS-SA-2026-3886)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Use-after-free UAF was possible in the lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile when a memory allocation fail...

CLEANSTART-2026-KH84979 Security fix for CVE-2025-8291 applied in: python3 3.13.8-r0, python3 3.14.0-r0

CVE-2025-8291 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...