Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-gunicorn (UTSA-2026-142338)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142338 advisory. Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback...

SUSE SLES15 Security Update : python-hpack (SUSE-SU-2026:4593-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4593-1 advisory. This update for python-hpack fixes the following issue: - CVE-2026-59980: unbounded variable integer decoding can cause run-away computation...

RHEL 10 : python-tornado (RHSA-2026:82041)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:82041 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic...

Amazon SageMaker-Python-SDK authorization issue vulnerability

Amazon SageMaker-Python-SDK V3 versions prior to 3.10.0 and V2 versions prior to 2.257.3 contain an authorization issue vulnerability. This vulnerability stems from a lack of validation regarding the communication channel origin in the defaultbucket function. It may allow remote attackers to...

Slackware Linux 15.0 / current python-certifi Vulnerability (SSA:2026-293-06)

The version of python-certifi installed on the remote host is prior to 2026.10.19. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-293-06 advisory. New python-certifi packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-gunicorn (UTSA-2026-142339)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142339 advisory. Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling HRS vulnerabilities. By crafting requests with conflicting...

Unity Linux 20.1070a Security Update: python3.11 (UTSA-2026-141792)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-141792 advisory. An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters...

AlmaLinux 10 : python-urllib3 (ALSA-2026:85930)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:85930 advisory. urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser CVE-2026-97689 urllib3: urllib3: Traffic interception via HTTPS prox...

AlmaLinux 8 : python3 (ALSA-2026:85239)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:85239 advisory. python: python: Arbitrary file deletion via race condition during temporary directory cleanup CVE-2026-12345 python: python: Certificate verification...

RHEL 10 : python3.12 (RHSA-2026:77020)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:77020 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

RockyLinux 8 : python3 (RLSA-2026:85239)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:85239 advisory. python: python: Arbitrary file deletion via race condition during temporary directory cleanup CVE-2026-12345 python: python: Certificate verification...

RHEL 10 : python-tornado (RHSA-2026:80741)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:80741 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

Oracle Linux 10 : python-urllib3 (ELSA-2026-85930)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-85930 advisory. - CVE-2026-97689 python3.12-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser Resolves: RHEL-282258 Tenable has...

python-oci-sdk security update

2.187.0-1.0.5 - Fix multiple CVEs in pyjwt, aiohttp, pyOpenSSL, multidict...

Rocky Linux 8 [CIQ] Security Update: pcs / pcs-snmp Multiple Vulnerabilities (crlsa-2026_84798)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202684798 advisory. python-tornado: Tornado: Denial of Service via excessive URL-encoded body fields CVE-2026-82397 python-tornado: Tornado before 6.4.1 HTTP Request Smugglin...

RHEL 9 : python-tornado (RHSA-2026:82040)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:82040 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

Unity Linux 20.1070a Security Update: python3.11 (UTSA-2026-141788)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-141788 advisory. An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath, the path will be truncated unexpectedly at the...

CLSA-2026-1792537548 Fix CVE(s): CVE-2025-7425

SECURITY UPDATE: double free in the Python bindings' SAX attributeDecl callback - debian/patches/CVE-2026-74860.patch: do not PyDECREF the attribute name string after PyListSetItem has stolen its reference in pythonAttributeDecl in python/libxml.c - CVE-2026-74860...

CLSA-2026-1789661605 python: Fix of 3 CVEs

CVE-2026-9669: fix a stack buffer overflow in the bz2 module when a BZ2Decompressor object is reused after a decompression error; the decompressor now becomes unusable once libbz2 reports an error, instead of resuming from an invalid internal state...

CVE-2026-83404

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Python. The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attac...