Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109820)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109820 advisory. Mitgation ofCVE-2026-4519 was incomplete. If the URL contained %action the mitigation could be bypassed for certain browser types the webbrowser.open API could have...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109810)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109810 advisory. When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109821)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109821 advisory. pkgutil.getdata did not validate the resource argument as documented, allowing path traversals. Tenable has extracted the preceding description block directly from t...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109805)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109805 advisory. CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. Tenable has extracted the preceding description block directly from the Unity Linux securi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109829)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109829 advisory. http.cookies.Morsel.jsoutput returns an inline snippet and only escapes for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence insi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109815)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109815 advisory. When using the configparser module to write configuration files containing multi-line text values with carriage return characters \r the resulting file could be...

EulerOS 2.0 SP15 : python3 (EulerOS-SA-2026-3819)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109831)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109831 advisory. unicodedata.normalize can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109803)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109803 advisory. The email module, specifically the BytesGenerator class, didnt properly quote newlines for email headers when serializing an email message allowing for header...

EulerOS 2.0 SP15 : python3 (EulerOS-SA-2026-3794)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109799)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109799 advisory. tarfile.datafilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109828)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109828 advisory. The tarfile module would still apply normalization of AREGTYPE blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPELONGNAME or...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109800)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109800 advisory. Element.findall and fully-consumed Element.iterfind exhibit On^2 time complexity when using XPath index predicates e.g. 1, last, last-N on XML documents with many...

Fedora 44 : python-django6 (2026-6613125727)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6613125727 advisory. Update python-django6 providing python3-django to the latest 6.1.1 release Tenable has extracted the preceding description block directly from the...

OESA-2026-3755 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-054006)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054006 advisory. In Python aka CPython up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers t...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2022-000997)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000997 advisory. The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code o...

AZL-103383 CVE-2026-87910 affecting package python3 3.12.14-2

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

Security update for python3

This update for python3 fixes the following issues: Security issues fixed: CVE-2026-13346: arbitrary file installation via malicious package indexes bsc1273091. Non security issue fixed: Update bundled pip wheels to pip-10.0.1-py2.py3-none-any.whl Patch Instructions: To install this SUSE update u...

SUSE-SU-2026:4060-1 Security update for python3

This update for python3 fixes the following issues: Security issues fixed: - CVE-2026-13346: arbitrary file installation via malicious package indexes bsc1273091. Non security issue fixed: - Update bundled pip wheels to pip-10.0.1-py2.py3-none-any.whl...