21 matches found
EulerOS 2.0 SP13 : python3 (EulerOS-SA-2026-4101)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : unicodedata.normalize can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters wi...
EulerOS 2.0 SP13 : python3 (EulerOS-SA-2026-4192)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : unicodedata.normalize can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters wi...
EulerOS 2.0 SP11 : python3 (EulerOS-SA-2026-4373)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Element.findall and fully-consumed Element.iterfind exhibit On^2 time complexity when using XPath index predicates e.g. 1, last, last-N on XML...
[SECURITY] [DLA 4827-1] python3.11 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4827-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura October 08, 2026 https://wiki.debian.org/LTS -...
Debian dla-4827 : idle-python3.11 - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4827 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4827-1 [email protected]...
EulerOS 2.0 SP15 : python3 (EulerOS-SA-2026-4012)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : unicodedata.normalize can take excessive CPU time when processingx000D specially crafted Unicode input containing long runs of combining...
EulerOS 2.0 SP15 : python3 (EulerOS-SA-2026-3946)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : unicodedata.normalize can take excessive CPU time when processingx000D specially crafted Unicode input containing long runs of combining...
AlmaLinux 9.2 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.2:CLSA-2026:1786497454)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786497454 advisory. - unicodedata.normalize can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining...
AlmaLinux 9.2 [TuxCare] Security Update: python3.11 / python3.11-debug / python3.11-devel / python3.11-idle / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1790238098)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1790238098 advisory. - The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and...
CLSA-2026-1790238098 python3.11: Fix of 5 CVEs
CVE-2026-3276: sort each combining-character run in unicodedata.normalize with a counting sort once the run exceeds a length threshold, instead of the quadratic insertion sort, so crafted input with long runs of alternating canonical combining classes can no longer burn CPU - CVE-2026-8328: apply...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109831)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109831 advisory. unicodedata.normalize can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating...
python: Python unicodedata: Denial of Service due to excessive CPU consumption
A flaw was found in the unicodedata.normalize function in Python. This vulnerability allows a remote attacker to cause excessive CPU consumption by providing specially crafted Unicode input. Successful exploitation can lead to a Denial of Service DoS on the affected system...
python: Python unicodedata: Denial of Service due to excessive CPU consumption
A flaw was found in the unicodedata.normalize function in Python. This vulnerability allows a remote attacker to cause excessive CPU consumption by providing specially crafted Unicode input. Successful exploitation can lead to a Denial of Service DoS on the affected system...
python: Python unicodedata: Denial of Service due to excessive CPU consumption
A flaw was found in the unicodedata.normalize function in Python. This vulnerability allows a remote attacker to cause excessive CPU consumption by providing specially crafted Unicode input. Successful exploitation can lead to a Denial of Service DoS on the affected system...
python: Python unicodedata: Denial of Service due to excessive CPU consumption
A flaw was found in the unicodedata.normalize function in Python. This vulnerability allows a remote attacker to cause excessive CPU consumption by providing specially crafted Unicode input. Successful exploitation can lead to a Denial of Service DoS on the affected system...
python: Python unicodedata: Denial of Service due to excessive CPU consumption
A flaw was found in the unicodedata.normalize function in Python. This vulnerability allows a remote attacker to cause excessive CPU consumption by providing specially crafted Unicode input. Successful exploitation can lead to a Denial of Service DoS on the affected system...
CLSA-2026-1786764414 python3.9: Fix of 2 CVEs
CVE-2026-3276: replace quadratic canonical ordering in unicodedata.normalize with counting sort for long combining-mark runs...
CLSA-2026-1786497454 python3.9: Fix of CVE-2026-3276
CVE-2026-3276: replace quadratic canonical ordering in unicodedata.normalize with counting sort for long combining-mark runs...
Potential DoS via quadratic complexity in unicodedata.normalize()
...
SUSE CVE-2026-3276
unicodedata.normalize can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canonical Combining Class values. This affects all normalization forms...