EulerOS 2.0 SP10 : python3 (EulerOS-SA-2026-3719)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Use-after-free UAF was possible in the lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile when a memory allocation fails with a...

EulerOS 2.0 SP10 : python3 (EulerOS-SA-2026-3766)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Use-after-free UAF was possible in the lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile when a memory allocation fails with a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109804)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109804 advisory. Use-after-free UAF was possible in the lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile when a memory allocation fails with a MemoryError and the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109800)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109800 advisory. Element.findall and fully-consumed Element.iterfind exhibit On^2 time complexity when using XPath index predicates e.g. 1, last, last-N on XML documents with many...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109812)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109812 advisory. The import hook in CPython that handles legacy .pyc files SourcelessFileLoader is incorrectly handled in FileLoader a base class and so does not use io.opencode to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109814)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109814 advisory. bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, craft...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109803)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109803 advisory. The email module, specifically the BytesGenerator class, didnt properly quote newlines for email headers when serializing an email message allowing for header...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109810)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109810 advisory. When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109828)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109828 advisory. The tarfile module would still apply normalization of AREGTYPE blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPELONGNAME or...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109794)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109794 advisory. The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickling paths were not...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109819)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109819 advisory. The webbrowser.open API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109820)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109820 advisory. Mitgation ofCVE-2026-4519 was incomplete. If the URL contained %action the mitigation could be bypassed for certain browser types the webbrowser.open API could have...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109829)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109829 advisory. http.cookies.Morsel.jsoutput returns an inline snippet and only escapes for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence insi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109831)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109831 advisory. unicodedata.normalize can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109832)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109832 advisory. The ftpcp function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv was patched to replace server-supplied PASV host addresses with the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109815)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109815 advisory. When using the configparser module to write configuration files containing multi-line text values with carriage return characters \r the resulting file could be...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109830)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109830 advisory. When using the tarfile module with a file opened in streaming mode mode=r| the tarfile module did not properly handle EOF, meaning an archive could be parsed in an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109821)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109821 advisory. pkgutil.getdata did not validate the resource argument as documented, allowing path traversals. Tenable has extracted the preceding description block directly from t...

EulerOS 2.0 SP15 : python3 (EulerOS-SA-2026-3794)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same...

EulerOS 2.0 SP15 : python3 (EulerOS-SA-2026-3819)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same...