62316 matches found
Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive
Summary Penelope versions prior to 0.19.3 extracted tar archives received from remote sessions without validating archive member paths. When using the affected Unix download path, a malicious or compromised remote session could return a crafted tar archive containing path traversal entries, such ...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.12: python3.12-3.12.13-3.7.hum1 aarch64, x8664 python3.12-debug-3.12.13-3.7.hum1 aarch64, x8664 python3.12-devel-3.12.13-3.7.hum1 aarch64, x8664 python3.12-idle-3.12.13-3.7.hum1 aarch64,...
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
A flaw was found in the Python Tarfile.extract function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the filter parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leadin...
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
A flaw was found in the Python Tarfile.extract function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the filter parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leadin...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.13: python3.13-3.13.14-1.6.hum1 aarch64, x8664 python3.13-debug-3.13.14-1.6.hum1 aarch64, x8664 python3.13-devel-3.13.14-1.6.hum1 aarch64, x8664 python3.13-freethreading-3.13.14-1.6.hum1...
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
A flaw was found in the Python Tarfile.extract function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the filter parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leadin...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.11: python3.11-3.11.15-5.4.hum1 aarch64, x8664 python3.11-debug-3.11.15-5.4.hum1 aarch64, x8664 python3.11-devel-3.11.15-5.4.hum1 aarch64, x8664 python3.11-idle-3.11.15-5.4.hum1 aarch64,...
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
A flaw was found in the Python Tarfile.extract function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the filter parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leadin...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.10: python3.10-3.10.20-3.1.hum1 aarch64, x8664 python3.10-debug-3.10.20-3.1.hum1 aarch64, x8664 python3.10-devel-3.10.20-3.1.hum1 aarch64, x8664 python3.10-idle-3.10.20-3.1.hum1 aarch64,...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.14: python-unversioned-command-3.14.6-2.1.hum1 noarch python3-3.14.6-2.1.hum1 aarch64, x8664 python3-debug-3.14.6-2.1.hum1 aarch64, x8664 python3-devel-3.14.6-2.1.hum1 aarch64, x8664...
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
A flaw was found in the Python Tarfile.extract function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the filter parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leadin...
Security update for python-dulwich
This update for python-dulwich fixes the following issue CVE-2026-38974: Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py bsc1271525. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
SUSE-SU-2026:3408-1 Security update for python-dulwich
This update for python-dulwich fixes the following issue - CVE-2026-38974: Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py bsc1271525...
Security update for python-ujson
This update for python-ujson fixes the following issue: CVE-2026-44660: failing to decrement a serialized JSON object during a write exception in ujson.dump can lead to memory leaks bsc1270301. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.
Summary Multiple vulnerabilities have been found in CICS Transaction Gateway for Multiplatforms due to the use of IBM WebSphere Application Server Liberty, IBM WebSphere Application Server and Jackson Databind. The versions of IBM WebSphere Application Server Liberty, IBM WebSphere Application...
Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities
Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-0994 DESCRIPTION: A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when...
CVE-2026-8286 vulnerabilities
Vulnerabilities for packages: eco-python-curl...
CVE-2026-11586 vulnerabilities
Vulnerabilities for packages: eco-python-curl...