CLSA-2026-1787718630 TuxCare security update for pillow (3 CVEs)

TuxCare rebuilt pillow to address 3 CVEs. Fixed in 10.4.0.post6+tuxcare...

[SECURITY] Fedora 44 Update: python-tablib-3.10.0-1.fc44

Tablib is a format-agnostic tabular dataset library, written in Python...

[SECURITY] Fedora 44 Update: python3.10-3.10.21-1.fc44

Python 3.10 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.10 package provides the "python3.10" executable:...

[SECURITY] Fedora 43 Update: python-tablib-3.10.0-1.fc43

Tablib is a format-agnostic tabular dataset library, written in Python...

[SECURITY] Fedora 43 Update: python3.10-3.10.21-1.fc43

Python 3.10 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.10 package provides the "python3.10" executable:...

[SECURITY] Fedora 43 Update: python3.11-3.11.16-1.fc43

Python 3.11 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.11 package provides the "python3.11" executable:...

OPENSUSE-SU-2026:11616-1 python313-geopandas-1.1.4-1.1 on GA media

These are all security issues fixed in the python313-geopandas-1.1.4-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-80206: Inefficient Regular Expression Complexity

NLTK before 3.10.3 contains a regular expression denial of service ReDoS vulnerability in the tgrep module. The tgrepnodeaction function compiles user-supplied regular expressions embedded in /regex/ pattern nodes and executes them via re.search against tree node labels without any validation or...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-bleach (UTSA-2026-093655)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093655 advisory. A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script, textarea,...

Fedora 43 : python3.12 (2026-7de2b1cfc5)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7de2b1cfc5 advisory. A security update of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

CVE-2026-75062: Improper Neutralization of Directives in Dynamically Evaluated Code

Improper Neutralization of Directives in Dynamically Evaluated Code 'Eval Injection' in the default lf.query Python protocol in Google langfun versions prior to 0.1.2 allows remote unauthenticated attackers to execute arbitrary Python code in the context of the host application via crafted prompt...

OPENSUSE-SU-2026:11614-1 python313-Authlib-1.7.2-3.1 on GA media

These are all security issues fixed in the python313-Authlib-1.7.2-3.1 package on the GA media of openSUSE Tumbleweed...

Fedora 43 : python-tablib (2026-81ad01b22a)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-81ad01b22a advisory. Resolves: https://nvd.nist.gov/vuln/detail/CVE-2026-9318 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

Linux Distros Unpatched Vulnerability : CVE-2026-79657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific...

Linux Distros Unpatched Vulnerability : CVE-2026-80206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK before 3.10.3 contains a regular expression denial of service ReDoS vulnerability in the tgrep module. The tgrepnodeaction function compiles user-supplied...

MiracleLinux 9 : python-urwid-2.1.2-4.el9_8.1 (AXSA:2026-1663:02)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1663:02 advisory. urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure CVE-2026-9323 Tenable has extracted the preceding description...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-joblib (UTSA-2026-054055)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054055 advisory. The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement. Tenable h...

Linux Distros Unpatched Vulnerability : CVE-2026-68514

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions 3.3.0 through...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-py (UTSA-2026-093196)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093196 advisory. A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial...

Fedora 44 : python-tablib (2026-eaa6ecd43e)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-eaa6ecd43e advisory. Resolves: https://nvd.nist.gov/vuln/detail/CVE-2026-9318 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...