RockyLinux 9 : python3.9 (RLSA-2026:39798)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39798 advisory. python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVE-2026-15308 Bug Fixes and Enhancements: python3.9 testssl...

AlmaLinux 9 : python3.12 (ALSA-2026:39771)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:39771 advisory. python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVE-2026-15308 Tenable has extracted the preceding description...

PT-2026-60481

Name of the Vulnerable Software and Affected Versions Kiota versions prior to 1.32.0 Description Kiota is an OpenAPI based HTTP Client code generator. The Python generator fails to sanitize newlines in enum value descriptions provided via x-ms-enum.values.description. This data flows through...

SUSE SLED15 / SLES15 Security Update : python-cryptography (SUSE-SU-2026:3026-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3026-1 advisory. This update for python-cryptography fixes the following issues - CVE-2026-41676: openssl: Deriver:derive and...

Amazon Linux 2023 : python3.14, python3.14-devel, python3.14-freethreading (ALAS2023-2026-1929)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1929 advisory. tarfile.extractall with the 'data' or 'tar'filter could be bypassed by a crafted archive where a hardlinkreferences a symlink stored at a deeper name than the hardlink itself.The extraction...

Amazon Linux 2023 : python3.13, python3.13-devel, python3.13-freethreading (ALAS2023-2026-1910)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1910 advisory. tarfile.extractall with the 'data' or 'tar'filter could be bypassed by a crafted archive where a hardlinkreferences a symlink stored at a deeper name than the hardlink itself.The extraction...

python3.9 security, bug fix, and enhancement update

3.9.25-7.0.1.el98.2 - Remove upstream URL reference 3.9.25-7.2 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 3.9.25-7.1 - Fix ssl.SSLError: ASN1: NOTENOUGHDATA not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207...

Oracle Linux 9 : python3.9 (ELSA-2026-39798)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39798 advisory. - Security fix for CVE-2026-15308 Resolves: RHEL-193786 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

RHEL 9 : python3.9 (RHSA-2026:39798)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:39798 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

RHEL 8 : python3.12 (RHSA-2026:39893)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:39893 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

Oracle Linux 9 : python3.12 (ELSA-2026-39771)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39771 advisory. 3.12.13-3.0.1.el98.1 - Remove upstream URL reference 3.12.13-3.1 - Security fix for CVE-2026-15308 Resolves: RHEL-RHEL-193793 Tenable has extracted the precedi...

Oracle Linux 8 : python3.12 (ELSA-2026-39893)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39893 advisory. 3.12.13-3 - Security fix for CVE-2026-15308 Resolves: RHEL-193776 Tenable has extracted the preceding description block directly from the Oracle Linux security...

RockyLinux 9 : python3.12 (RLSA-2026:39771)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39771 advisory. python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVE-2026-15308 Tenable has extracted the preceding description...

SUSE SLES15 Security Update : python-aiohttp (SUSE-SU-2026:3059-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3059-1 advisory. This update for python-aiohttp fixes the following issues - CVE-2026-22815: insufficient header/trailer handling can cause a denial...

python3.14 security, bug fix, and enhancement update

3.14.5-1 - Update to 3.14.5 Resolves: RHEL-176147 3.14.5rc1-1 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-176147...

ALSA-2026:40856 Important: python3.14 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

openSUSE 16 Security Update : python-mistune (openSUSE-SU-2026:21339-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21339-1 advisory. This update for python-mistune fixes the following issues - CVE-2026-59922: quadratic-time parsing on long runs of some markers in formatting.py...

Amazon Linux 2023 : python3.11, python3.11-devel, python3.11-idle (ALAS2023-2026-1930)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1930 advisory. The tarfile module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPELONGNAME or GNUTYPELONGLINK. This could result ...

AlmaLinux 8 : python3.12 (ALSA-2026:39893)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:39893 advisory. python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVE-2026-15308 Tenable has extracted the preceding description...

RHEL 10 : python3.14 (RHSA-2026:40856)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:40856 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic...