RLSA-2026:82858 Important: python36:3.6 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

angr 10.0.4

angr is an open-source binary analysis platform for Python. It combines both static and dynamic symbolic "concolic" analysis, providing tools to solve a variety of tasks...

Linux Distros Unpatched Vulnerability : CVE-2026-79824

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR...

CVE-2026-102946: Authentication Bypass by Spoofing

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.4, joserfc.jws.deserializejson accepts a JWS General JSON Serialization with an empty signatures array as authenticated. The verifygeneraljson loop performs no...

Fedora 43 : python3-docs / python3.14 (2026-a3da6bb5cd)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-a3da6bb5cd advisory. New version of Python interpreter Security fix for CVE-2026-19553 Security fix for CVE-2026-82049 Security fix for CVE-2026-15310 Security fix for...

Linux Distros Unpatched Vulnerability : CVE-2026-106435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression...

PT-2026-114865

A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive...

PT-2026-115208

Name of the Vulnerable Software and Affected Versions Python Social Auth versions prior to 5.0.2 Description The LINE backend fails to validate the returned OAuth state during the exchange of an authorization code. This allows an attacker to initiate an authorization flow for an account they...

HPE NonStop Python path traversal vulnerability

HPE NonStop Python T0993L01^AAL and earlier versions contain a path traversal vulnerability. This vulnerability arises because the TAR archive filename contains a “..” sequence, leading to directory traversal. It may allow attackers to overwrite any file...

PT-2026-122741

Security vulnerability affects the opentelemetry-collector-contrib package. Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node...

python313-python-rapidjson-1.23-1.4 on GA media (moderate)

python313-python-rapidjson-1.23-1.4 on GA media Announcement ID: openSUSE-SU-2026:12033-1 Rating: moderate Cross-References: CVE-2024-27454 CVSS scores: CVE-2024-27454 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one...

python313-python-multipart-0.0.32-1.3 on GA media (moderate)

python313-python-multipart-0.0.32-1.3 on GA media Announcement ID: openSUSE-SU-2026:12032-1 Rating: moderate Cross-References: CVE-2024-24762 CVSS scores: CVE-2024-24762 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one...

SUSE SLED15 / SLES15 Security Update : python-urllib3 (SUSE-SU-2026:4650-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4650-1 advisory. - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding bsc1283909. -...

SUSE SLED15 / SLES15 Security Update : python-virtualenv (SUSE-SU-2026:4652-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4652-1 advisory. - CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering bsc1283904. ...

python36:3.6 security update

python36 3.6.8-39 - Provide /usr/bin/python3 explicitly - Resolves: RHEL-2113 python-distro 1.4.0-2 - Port from Fedora to RHEL8, part of the python36 module - Resolves: rhbz1678920 python-docs 3.6.7-2 - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz1695587 python-docutils...

Matoi: Selective Revalidation of Consequence Evidence for Agent Authorization

Matoi separates reusable consequence evidence from current execution authority and durable occurrence history. Its finite query-aware contract covers branches, ordered collections and negative lookups. A consumer reuses only its own checked evidence whose observations remain valid; signed request...

CVE-2026-62322: Cross-Site Request Forgery (CSRF)

Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the LINE backend exchanges an authorization code without validating the returned OAuth state. An attacker can begin authorization for an attacker-controlled LINE account and induce a victim to visit the resultin...

CVE-2026-79824: Path Traversal: '\dir\..\filename'

A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive...

Rocky Linux 8 [CIQ] Security Update: python-nose-docs / python-pymongo-debuginfo / etc (crlsa-2026_82858)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202682858 advisory. pymongo: MongoDB Python Driver: Data disclosure and denial of service via query-operator injection CVE-2026-88029 Tenable has extracted the preceding description...

Fedora 46 : python-cairosvg (2026-03d5084cef)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-03d5084cef advisory. Automatic update for python-cairosvg-2.9.1-1.fc46. Changelog Tue Oct 13 2026 Packit - 2.9.1-1 - Update to 2.9.1 upstream release - Resolves: rhbz2529345 -...