Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-11972 (GCVE-0-2026-11972)
Vulnerability from cvelistv5 – Published: 2026-06-23 22:02 – Updated: 2026-08-13 00:28| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Python Software Foundation | CPython |
Affected:
0 , < 3.10.21
(python)
Affected: 3.11.0 , < 3.11.16 (python) Affected: 3.12.0 , < 3.12.14 (python) Affected: 3.13.0 , < 3.13.15 (python) Affected: 3.14.0 , < 3.14.7 (python) Affected: 3.15.0a1 , < 3.15.0b4 (python) |
guessed |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-11972",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-24T15:33:49.665045Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-24T15:34:06.959Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"modules": [
"tarfile"
],
"product": "CPython",
"repo": "https://github.com/python/cpython",
"vendor": "Python Software Foundation",
"versions": [
{
"lessThan": "3.10.21",
"status": "affected",
"version": "0",
"versionType": "python"
},
{
"lessThan": "3.11.16",
"status": "affected",
"version": "3.11.0",
"versionType": "python"
},
{
"lessThan": "3.12.14",
"status": "affected",
"version": "3.12.0",
"versionType": "python"
},
{
"lessThan": "3.13.15",
"status": "affected",
"version": "3.13.0",
"versionType": "python"
},
{
"lessThan": "3.14.7",
"status": "affected",
"version": "3.14.0",
"versionType": "python"
},
{
"lessThan": "3.15.0b4",
"status": "affected",
"version": "3.15.0a1",
"versionType": "python"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Ryan Hileman (https://github.com/lunixbochs)"
},
{
"lang": "en",
"type": "coordinator",
"value": "Petr Viktorin (https://github.com/encukou)"
},
{
"lang": "en",
"type": "remediation reviewer",
"value": "Stan Ulbrych (https://github.com/StanFromIreland)"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"type": "text/html",
"value": "When using the \"tarfile\" module with a file opened in \"streaming mode\" (mode=\"r|\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer."
}
],
"value": "When using the \"tarfile\" module with a file opened in \"streaming mode\" (mode=\"r|\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-252",
"description": "CWE-252",
"lang": "en",
"type": "CWE"
},
{
"cweId": "CWE-606",
"description": "CWE-606",
"lang": "en",
"type": "CWE"
},
{
"cweId": "CWE-770",
"description": "CWE-770",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-13T00:28:46.899Z",
"orgId": "28c92f92-d60d-412d-b760-e73465c3df22",
"shortName": "PSF"
},
"references": [
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/python/cpython/issues/151981"
},
{
"tags": [
"patch"
],
"url": "https://github.com/python/cpython/pull/151982"
},
{
"tags": [
"vendor-advisory"
],
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/"
},
{
"tags": [
"patch"
],
"url": "https://github.com/python/cpython/commit/3f031d431f80668e14f3bc066bbf4369cd9281b9"
},
{
"tags": [
"patch"
],
"url": "https://github.com/python/cpython/commit/4ce6bf7c8aa7725828a38981c306f214c1f29365"
},
{
"tags": [
"patch"
],
"url": "https://github.com/python/cpython/commit/7f0dc59c9a70f8f3b4da33d7c4a2ba552a7acc21"
},
{
"tags": [
"patch"
],
"url": "https://github.com/python/cpython/commit/e86666c9dd256d52d0fbef6feb1ea4a51768fdec"
},
{
"tags": [
"patch"
],
"url": "https://github.com/python/cpython/commit/eb63c0f94dfcbea7fda8eab6213818e134d67192"
},
{
"tags": [
"patch"
],
"url": "https://github.com/python/cpython/commit/f50bf13566189c8d0ce5a814f33eff3d89951896"
},
{
"tags": [
"patch"
],
"url": "https://github.com/python/cpython/commit/f5e2776ff0383a902c12acf2b703e7e951fc8438"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "tarfile opened in streaming mode mishandles EOF",
"x_generator": {
"engine": "cvelib 1.8.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "28c92f92-d60d-412d-b760-e73465c3df22",
"assignerShortName": "PSF",
"cveId": "CVE-2026-11972",
"datePublished": "2026-06-23T22:02:45.434Z",
"dateReserved": "2026-06-11T11:35:05.520Z",
"dateUpdated": "2026-08-13T00:28:46.899Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-11972",
"date": "2026-08-24",
"epss": "0.00445",
"percentile": "0.36833"
},
"microsoft_vex": {
"current_release_date": "2026-08-12T23:44:42.000Z",
"cve": "CVE-2026-11972",
"id": "msrc_CVE-2026-11972",
"initial_release_date": "2026-06-27T01:08:28.000Z",
"product_status:fixed": "1",
"product_status:known_affected": "3",
"product_status:known_not_affected": "1",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "tarfile opened in streaming mode mishandles EOF",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-11972.json",
"version": "4"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-11972\",\"sourceIdentifier\":\"cna@python.org\",\"published\":\"2026-06-23T23:16:49.033\",\"lastModified\":\"2026-08-13T01:16:51.780\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"When using the \\\"tarfile\\\" module with a file opened in \\\"streaming mode\\\" (mode=\\\"r|\\\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.\"}],\"affected\":[{\"source\":\"cna@python.org\",\"affectedData\":[{\"vendor\":\"Python Software Foundation\",\"product\":\"CPython\",\"defaultStatus\":\"unaffected\",\"modules\":[\"tarfile\"],\"repo\":\"https://github.com/python/cpython\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"3.10.21\",\"versionType\":\"python\",\"status\":\"affected\"},{\"version\":\"3.11.0\",\"lessThan\":\"3.11.16\",\"versionType\":\"python\",\"status\":\"affected\"},{\"version\":\"3.12.0\",\"lessThan\":\"3.12.14\",\"versionType\":\"python\",\"status\":\"affected\"},{\"version\":\"3.13.0\",\"lessThan\":\"3.13.15\",\"versionType\":\"python\",\"status\":\"affected\"},{\"version\":\"3.14.0\",\"lessThan\":\"3.14.7\",\"versionType\":\"python\",\"status\":\"affected\"},{\"version\":\"3.15.0a1\",\"lessThan\":\"3.15.0b4\",\"versionType\":\"python\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"cna@python.org\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":8.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"PRESENT\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"NONE\",\"vulnIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-06-24T15:33:49.665045Z\",\"id\":\"CVE-2026-11972\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"cna@python.org\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-252\"},{\"lang\":\"en\",\"value\":\"CWE-606\"},{\"lang\":\"en\",\"value\":\"CWE-770\"}]}],\"references\":[{\"url\":\"https://github.com/python/cpython/commit/3f031d431f80668e14f3bc066bbf4369cd9281b9\",\"source\":\"cna@python.org\"},{\"url\":\"https://github.com/python/cpython/commit/4ce6bf7c8aa7725828a38981c306f214c1f29365\",\"source\":\"cna@python.org\"},{\"url\":\"https://github.com/python/cpython/commit/7f0dc59c9a70f8f3b4da33d7c4a2ba552a7acc21\",\"source\":\"cna@python.org\"},{\"url\":\"https://github.com/python/cpython/commit/e86666c9dd256d52d0fbef6feb1ea4a51768fdec\",\"source\":\"cna@python.org\"},{\"url\":\"https://github.com/python/cpython/commit/eb63c0f94dfcbea7fda8eab6213818e134d67192\",\"source\":\"cna@python.org\"},{\"url\":\"https://github.com/python/cpython/commit/f50bf13566189c8d0ce5a814f33eff3d89951896\",\"source\":\"cna@python.org\"},{\"url\":\"https://github.com/python/cpython/commit/f5e2776ff0383a902c12acf2b703e7e951fc8438\",\"source\":\"cna@python.org\"},{\"url\":\"https://github.com/python/cpython/issues/151981\",\"source\":\"cna@python.org\"},{\"url\":\"https://github.com/python/cpython/pull/151982\",\"source\":\"cna@python.org\"},{\"url\":\"https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/\",\"source\":\"cna@python.org\"}]}}",
"redhat_vex": {
"aggregate_severity": "Moderate",
"current_release_date": "2026-08-13T22:42:55+00:00",
"cve": "CVE-2026-11972",
"id": "CVE-2026-11972",
"initial_release_date": "2026-06-23T22:02:45.434000+00:00",
"product_status:fixed": "13",
"product_status:known_affected": "219",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11972.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-11972\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-06-24T15:33:49.665045Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-06-24T15:34:04.108Z\"}}], \"cna\": {\"title\": \"tarfile opened in streaming mode mishandles EOF\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"Ryan Hileman (https://github.com/lunixbochs)\"}, {\"lang\": \"en\", \"type\": \"coordinator\", \"value\": \"Petr Viktorin (https://github.com/encukou)\"}, {\"lang\": \"en\", \"type\": \"remediation reviewer\", \"value\": \"Stan Ulbrych (https://github.com/StanFromIreland)\"}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"NOT_DEFINED\", \"baseScore\": 8.2, \"Automatable\": \"NOT_DEFINED\", \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N\", \"exploitMaturity\": \"NOT_DEFINED\", \"providerUrgency\": \"NOT_DEFINED\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"PRESENT\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"NONE\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"HIGH\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"NONE\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"repo\": \"https://github.com/python/cpython\", \"vendor\": \"Python Software Foundation\", \"modules\": [\"tarfile\"], \"product\": \"CPython\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"3.10.21\", \"versionType\": \"python\"}, {\"status\": \"affected\", \"version\": \"3.11.0\", \"lessThan\": \"3.11.16\", \"versionType\": \"python\"}, {\"status\": \"affected\", \"version\": \"3.12.0\", \"lessThan\": \"3.12.14\", \"versionType\": \"python\"}, {\"status\": \"affected\", \"version\": \"3.13.0\", \"lessThan\": \"3.13.15\", \"versionType\": \"python\"}, {\"status\": \"affected\", \"version\": \"3.14.0\", \"lessThan\": \"3.14.7\", \"versionType\": \"python\"}, {\"status\": \"affected\", \"version\": \"3.15.0a1\", \"lessThan\": \"3.15.0b4\", \"versionType\": \"python\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://github.com/python/cpython/issues/151981\", \"tags\": [\"issue-tracking\"]}, {\"url\": \"https://github.com/python/cpython/pull/151982\", \"tags\": [\"patch\"]}, {\"url\": \"https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://github.com/python/cpython/commit/3f031d431f80668e14f3bc066bbf4369cd9281b9\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/python/cpython/commit/4ce6bf7c8aa7725828a38981c306f214c1f29365\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/python/cpython/commit/7f0dc59c9a70f8f3b4da33d7c4a2ba552a7acc21\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/python/cpython/commit/e86666c9dd256d52d0fbef6feb1ea4a51768fdec\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/python/cpython/commit/eb63c0f94dfcbea7fda8eab6213818e134d67192\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/python/cpython/commit/f50bf13566189c8d0ce5a814f33eff3d89951896\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/python/cpython/commit/f5e2776ff0383a902c12acf2b703e7e951fc8438\", \"tags\": [\"patch\"]}], \"x_generator\": {\"engine\": \"cvelib 1.8.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"When using the \\\"tarfile\\\" module with a file opened in \\\"streaming mode\\\" (mode=\\\"r|\\\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"When using the \\\"tarfile\\\" module with a file opened in \\\"streaming mode\\\" (mode=\\\"r|\\\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.\"}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-252\", \"description\": \"CWE-252\"}, {\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-606\", \"description\": \"CWE-606\"}, {\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-770\", \"description\": \"CWE-770\"}]}], \"providerMetadata\": {\"orgId\": \"28c92f92-d60d-412d-b760-e73465c3df22\", \"shortName\": \"PSF\", \"dateUpdated\": \"2026-08-13T00:28:46.899Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-11972\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-13T00:28:46.899Z\", \"dateReserved\": \"2026-06-11T11:35:05.520Z\", \"assignerOrgId\": \"28c92f92-d60d-412d-b760-e73465c3df22\", \"datePublished\": \"2026-06-23T22:02:45.434Z\", \"assignerShortName\": \"PSF\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:35813
Vulnerability from csaf_redhat - Published: 2026-07-05 20:02 - Updated: 2026-08-24 12:31A flaw was found in the Python `tarfile` module. When processing a specially crafted tar archive opened in 'streaming mode' (mode='r|'), the module does not properly handle the end-of-file (EOF) condition. This can cause the `tarfile` module to enter an infinite loop, leading to a Denial of Service (DoS) for applications processing such archives.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:python3-12-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-12-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-12-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\npython3.12:\n * python3.12-3.12.13-3.3.hum1 (aarch64, x86_64)\n * python3.12-debug-3.12.13-3.3.hum1 (aarch64, x86_64)\n * python3.12-devel-3.12.13-3.3.hum1 (aarch64, x86_64)\n * python3.12-idle-3.12.13-3.3.hum1 (aarch64, x86_64)\n * python3.12-libs-3.12.13-3.3.hum1 (aarch64, x86_64)\n * python3.12-test-3.12.13-3.3.hum1 (aarch64, x86_64)\n * python3.12-tkinter-3.12.13-3.3.hum1 (aarch64, x86_64)\n * python3.12-3.12.13-3.3.hum1.src (src)\n\nSecurity Fix(es):\n\npython3.12:\n * CVE-2026-11972",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:35813",
"url": "https://access.redhat.com/errata/RHSA-2026:35813"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-11972",
"url": "https://access.redhat.com/security/cve/CVE-2026-11972"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_35813.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
"tracking": {
"current_release_date": "2026-08-24T12:31:59+00:00",
"generator": {
"date": "2026-08-24T12:31:59+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:35813",
"initial_release_date": "2026-07-05T20:02:26+00:00",
"revision_history": [
{
"date": "2026-07-05T20:02:26+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-24T12:31:59+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-12-main@aarch64",
"product": {
"name": "python3-12-main@aarch64",
"product_id": "python3-12-main@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12@3.12.13-3.3.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-12-main@src",
"product": {
"name": "python3-12-main@src",
"product_id": "python3-12-main@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12@3.12.13-3.3.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-12-main@x86_64",
"product": {
"name": "python3-12-main@x86_64",
"product_id": "python3-12-main@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12@3.12.13-3.3.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-12-main@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:python3-12-main@aarch64"
},
"product_reference": "python3-12-main@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-12-main@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:python3-12-main@src"
},
"product_reference": "python3-12-main@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-12-main@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:python3-12-main@x86_64"
},
"product_reference": "python3-12-main@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-11972",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-06-23T23:01:07.338455+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492050"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Python `tarfile` module. When processing a specially crafted tar archive opened in \u0027streaming mode\u0027 (mode=\u0027r|\u0027), the module does not properly handle the end-of-file (EOF) condition. This can cause the `tarfile` module to enter an infinite loop, leading to a Denial of Service (DoS) for applications processing such archives.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Python tarfile module. When processing a tar archive in streaming mode (mode=\u0027r|\u0027), the _Stream.seek function does not properly check for end-of-file, which can cause an infinite loop when processing a specially crafted archive. Red Hat ships Python as part of many products, and applications using tarfile\u0027s streaming mode are potentially affected by this denial of service vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:python3-12-main@aarch64",
"Red Hat Hardened Images:python3-12-main@src",
"Red Hat Hardened Images:python3-12-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11972"
},
{
"category": "external",
"summary": "RHBZ#2492050",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492050"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11972",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11972"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11972",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11972"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/151981",
"url": "https://github.com/python/cpython/issues/151981"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/151982",
"url": "https://github.com/python/cpython/pull/151982"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/"
}
],
"release_date": "2026-06-23T22:02:45.434000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-05T20:02:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:python3-12-main@aarch64",
"Red Hat Hardened Images:python3-12-main@src",
"Red Hat Hardened Images:python3-12-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:35813"
},
{
"category": "workaround",
"details": "Avoid using tarfile streaming mode (mode=\u0027r|\u0027) with untrusted tar archives. Use the standard file-based mode (mode=\u0027r\u0027) instead where possible.",
"product_ids": [
"Red Hat Hardened Images:python3-12-main@aarch64",
"Red Hat Hardened Images:python3-12-main@src",
"Red Hat Hardened Images:python3-12-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:python3-12-main@aarch64",
"Red Hat Hardened Images:python3-12-main@src",
"Red Hat Hardened Images:python3-12-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode"
}
]
}
RHSA-2026:54534
Vulnerability from csaf_redhat - Published: 2026-08-13 11:03 - Updated: 2026-08-24 12:16A flaw was found in the Python `Tarfile.extract()` function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the `filter` parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leading to unauthorized modifications or privilege issues on the system.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@x86_64 | — |
Vendor Fix
fix
|
A flaw was found in Python's xml.etree.ElementPath component. This vulnerability can lead to a denial of service (DoS) when processing specially crafted XML documents. Specifically, certain XPath index predicates used with functions like Element.findall() and Element.iterfind() can cause the processing time to increase quadratically with the size of the input, making the system unresponsive. A remote attacker could exploit this by providing a malicious XML file, potentially disrupting service availability.
CWE-770 - Allocation of Resources Without Limits or Throttling| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@x86_64 | — |
Vendor Fix
fix
|
A flaw was found in the `tarfile.extractall()` function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside the intended destination directory. This could lead to out-of-destination file reads or writes, potentially resulting in information disclosure or arbitrary file modification.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in the Python `tarfile` module. When processing a specially crafted tar archive opened in 'streaming mode' (mode='r|'), the module does not properly handle the end-of-file (EOF) condition. This can cause the `tarfile` module to enter an infinite loop, leading to a Denial of Service (DoS) for applications processing such archives.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in Python. Its incremental HTML parser can be exploited by a remote attacker. By sending specially crafted, uncontrolled data with repeated, incomplete markup declarations, the attacker can cause the system to consume excessive central processing unit (CPU) resources. This leads to a denial of service, making the affected system unresponsive.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in the `csv.Sniffer.sniff()` function within Python. An attacker can exploit this by providing specially crafted CSV samples, which can trigger super-linear regular-expression processing during dialect sniffing. This excessive processing consumes significant CPU resources, potentially leading to a Denial of Service (DoS) for applications that process unbounded input using this function.
CWE-1333 - Inefficient Regular Expression Complexity| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-14-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\npython3.14:\n * python-unversioned-command-3.14.7-1.hum1 (noarch)\n * python3-3.14.7-1.hum1 (aarch64, x86_64)\n * python3-debug-3.14.7-1.hum1 (aarch64, x86_64)\n * python3-devel-3.14.7-1.hum1 (aarch64, x86_64)\n * python3-idle-3.14.7-1.hum1 (aarch64, x86_64)\n * python3-libs-3.14.7-1.hum1 (aarch64, x86_64)\n * python3-test-3.14.7-1.hum1 (aarch64, x86_64)\n * python3-tkinter-3.14.7-1.hum1 (aarch64, x86_64)\n * python3.14-freethreading-3.14.7-1.hum1 (aarch64, x86_64)\n * python3.14-freethreading-debug-3.14.7-1.hum1 (aarch64, x86_64)\n * python3.14-freethreading-devel-3.14.7-1.hum1 (aarch64, x86_64)\n * python3.14-freethreading-idle-3.14.7-1.hum1 (aarch64, x86_64)\n * python3.14-freethreading-libs-3.14.7-1.hum1 (aarch64, x86_64)\n * python3.14-freethreading-test-3.14.7-1.hum1 (aarch64, x86_64)\n * python3.14-freethreading-tkinter-3.14.7-1.hum1 (aarch64, x86_64)\n * python3.14-3.14.7-1.hum1.src (src)\n\nSecurity Fix(es):\n\npython3.14:\n * CVE-2026-11940\n * CVE-2026-11972\n * CVE-2026-15308\n * CVE-2026-4360\n * CVE-2026-6879",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54534",
"url": "https://access.redhat.com/errata/RHSA-2026:54534"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-11940",
"url": "https://access.redhat.com/security/cve/CVE-2026-11940"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-11972",
"url": "https://access.redhat.com/security/cve/CVE-2026-11972"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-15308",
"url": "https://access.redhat.com/security/cve/CVE-2026-15308"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4360",
"url": "https://access.redhat.com/security/cve/CVE-2026-4360"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6879",
"url": "https://access.redhat.com/security/cve/CVE-2026-6879"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-18503",
"url": "https://access.redhat.com/security/cve/CVE-2026-18503"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54534.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
"tracking": {
"current_release_date": "2026-08-24T12:16:51+00:00",
"generator": {
"date": "2026-08-24T12:16:51+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54534",
"initial_release_date": "2026-08-13T11:03:04+00:00",
"revision_history": [
{
"date": "2026-08-13T11:03:04+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-24T12:16:51+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-14-main@noarch",
"product": {
"name": "python3-14-main@noarch",
"product_id": "python3-14-main@noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-unversioned-command@3.14.7-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-14-main@aarch64",
"product": {
"name": "python3-14-main@aarch64",
"product_id": "python3-14-main@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3@3.14.7-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-14-main@x86_64",
"product": {
"name": "python3-14-main@x86_64",
"product_id": "python3-14-main@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3@3.14.7-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-14-main@src",
"product": {
"name": "python3-14-main@src",
"product_id": "python3-14-main@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.14@3.14.7-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-14-main@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:python3-14-main@aarch64"
},
"product_reference": "python3-14-main@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-14-main@noarch as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:python3-14-main@noarch"
},
"product_reference": "python3-14-main@noarch",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-14-main@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:python3-14-main@src"
},
"product_reference": "python3-14-main@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-14-main@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:python3-14-main@x86_64"
},
"product_reference": "python3-14-main@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-4360",
"cwe": {
"id": "CWE-279",
"name": "Incorrect Execution-Assigned Permissions"
},
"discovery_date": "2026-06-30T15:01:14.438690+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494987"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Python `Tarfile.extract()` function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the `filter` parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leading to unauthorized modifications or privilege issues on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Python Tarfile: Unexpected file ownership when extracting hardlinks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate flaw in Python\u0027s Tarfile module allows a local attacker with low privileges to achieve a high integrity impact. By tricking a user into extracting a specially crafted untrusted tar file containing hardlinks, the attacker could cause files to be written with unexpected ownership, potentially leading to unauthorized file modification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4360"
},
{
"category": "external",
"summary": "RHBZ#2494987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494987"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4360",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4360"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4360",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4360"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/151987",
"url": "https://github.com/python/cpython/issues/151987"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/151988",
"url": "https://github.com/python/cpython/pull/151988"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/TWZW2PC2AZOV6FENIHFSRC63OM7MBGSB/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/TWZW2PC2AZOV6FENIHFSRC63OM7MBGSB/"
}
],
"release_date": "2026-06-30T14:45:35.601000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T11:03:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54534"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python: Python Tarfile: Unexpected file ownership when extracting hardlinks"
},
{
"cve": "CVE-2026-6879",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-28T17:34:14.787326+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2508122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Python\u0027s xml.etree.ElementPath component. This vulnerability can lead to a denial of service (DoS) when processing specially crafted XML documents. Specifically, certain XPath index predicates used with functions like Element.findall() and Element.iterfind() can cause the processing time to increase quadratically with the size of the input, making the system unresponsive. A remote attacker could exploit this by providing a malicious XML file, potentially disrupting service availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Python: Performance degradation in XML processing due to quadratic time complexity",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6879"
},
{
"category": "external",
"summary": "RHBZ#2508122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6879",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6879"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6879",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6879"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/2ffab083782968a4d732738f4f1dff6bbd69d2b0",
"url": "https://github.com/python/cpython/commit/2ffab083782968a4d732738f4f1dff6bbd69d2b0"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/152674",
"url": "https://github.com/python/cpython/issues/152674"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/152676",
"url": "https://github.com/python/cpython/pull/152676"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/7YMZ6DDZVR26TJJBVO3RDNBAVGHNYAKR/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/7YMZ6DDZVR26TJJBVO3RDNBAVGHNYAKR/"
}
],
"release_date": "2026-07-28T13:46:30.650000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T11:03:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54534"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 2.2,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Python: Performance degradation in XML processing due to quadratic time complexity"
},
{
"cve": "CVE-2026-11940",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-06-23T17:05:33.822236+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2491848"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `tarfile.extractall()` function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside the intended destination directory. This could lead to out-of-destination file reads or writes, potentially resulting in information disclosure or arbitrary file modification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat products that appear in dependency searches under names containing \"tarfile\" but that are not the CPython standard-library tarfile module are not affected by this flaw. Matches such as the Go packages under github.com/containers/image / go.podman.io/image (.../docker/tarfile and .../docker/internal/tarfile) and the Apache Camel artifacts (camel-tarfile, camel-quarkus-tarfile) are unrelated implementations in other languages and do not include the vulnerable CPython tarfile.extractall() filter logic. The separately packaged PyPI component backports-tarfile is also out of scope for this CVE as assigned: it is not the CPython stdlib module named in the advisory and this CVE tracks the interpreter-provided tarfile shipped in Red Hat python3* packages.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11940"
},
{
"category": "external",
"summary": "RHBZ#2491848",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491848"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11940",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11940"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/151558",
"url": "https://github.com/python/cpython/issues/151558"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/151559",
"url": "https://github.com/python/cpython/pull/151559"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/"
}
],
"release_date": "2026-06-23T16:04:17.321000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T11:03:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54534"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory"
},
{
"cve": "CVE-2026-11972",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-06-23T23:01:07.338455+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492050"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Python `tarfile` module. When processing a specially crafted tar archive opened in \u0027streaming mode\u0027 (mode=\u0027r|\u0027), the module does not properly handle the end-of-file (EOF) condition. This can cause the `tarfile` module to enter an infinite loop, leading to a Denial of Service (DoS) for applications processing such archives.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Python tarfile module. When processing a tar archive in streaming mode (mode=\u0027r|\u0027), the _Stream.seek function does not properly check for end-of-file, which can cause an infinite loop when processing a specially crafted archive. Red Hat ships Python as part of many products, and applications using tarfile\u0027s streaming mode are potentially affected by this denial of service vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11972"
},
{
"category": "external",
"summary": "RHBZ#2492050",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492050"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11972",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11972"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11972",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11972"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/151981",
"url": "https://github.com/python/cpython/issues/151981"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/151982",
"url": "https://github.com/python/cpython/pull/151982"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/"
}
],
"release_date": "2026-06-23T22:02:45.434000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T11:03:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54534"
},
{
"category": "workaround",
"details": "Avoid using tarfile streaming mode (mode=\u0027r|\u0027) with untrusted tar archives. Use the standard file-based mode (mode=\u0027r\u0027) instead where possible.",
"product_ids": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode"
},
{
"cve": "CVE-2026-15308",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-07-09T18:02:10.090070+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498608"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Python. Its incremental HTML parser can be exploited by a remote attacker. By sending specially crafted, uncontrolled data with repeated, incomplete markup declarations, the attacker can cause the system to consume excessive central processing unit (CPU) resources. This leads to a denial of service, making the affected system unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Python\u0027s `html.parser.HTMLParser` can lead to a denial of service. By supplying specially crafted, malformed HTML with repeated unterminated markup declarations, an attacker can cause excessive CPU consumption, rendering the system unresponsive. Red Hat products utilizing this parser to process untrusted HTML content are susceptible to resource exhaustion.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15308"
},
{
"category": "external",
"summary": "RHBZ#2498608",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498608"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15308",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15308"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15308",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15308"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9",
"url": "https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced",
"url": "https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e606",
"url": "https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e606"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd",
"url": "https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/153030",
"url": "https://github.com/python/cpython/issues/153030"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/153031",
"url": "https://github.com/python/cpython/pull/153031"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/"
}
],
"release_date": "2026-07-09T17:10:57.317000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T11:03:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54534"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations"
},
{
"cve": "CVE-2026-18503",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-08-10T14:11:09.811226+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2513510"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `csv.Sniffer.sniff()` function within Python. An attacker can exploit this by providing specially crafted CSV samples, which can trigger super-linear regular-expression processing during dialect sniffing. This excessive processing consumes significant CPU resources, potentially leading to a Denial of Service (DoS) for applications that process unbounded input using this function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Python: Denial of Service via super-linear regular expression work in csv.Sniffer.sniff()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has evaluated this issue and determined it has a Low security impact. The csv.Sniffer.sniff() function in Python\u0027s standard library is vulnerable to excessive CPU consumption when processing specially crafted CSV input, due to quadratic time complexity in the dialect sniffing regex. Most applications are not affected as they use csv.reader() or csv.DictReader() directly without invoking the sniffing functionality.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-18503"
},
{
"category": "external",
"summary": "RHBZ#2513510",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513510"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18503",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18503"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18503",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18503"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/98820",
"url": "https://github.com/python/cpython/issues/98820"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/153694",
"url": "https://github.com/python/cpython/pull/153694"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/KQ7NBMCPAZJHRROQXJQE4GMXGLD5KHBS/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/KQ7NBMCPAZJHRROQXJQE4GMXGLD5KHBS/"
}
],
"release_date": "2026-08-10T13:45:31.618000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T11:03:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54534"
},
{
"category": "workaround",
"details": "Do not pass untrusted or unbounded CSV input to csv.Sniffer.sniff(). If dialect detection is needed, limit the size of the sample passed to sniff() or use a known dialect directly with csv.reader().",
"product_ids": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 2.8,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:python3-14-main@aarch64",
"Red Hat Hardened Images:python3-14-main@noarch",
"Red Hat Hardened Images:python3-14-main@src",
"Red Hat Hardened Images:python3-14-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Python: Denial of Service via super-linear regular expression work in csv.Sniffer.sniff()"
}
]
}
RHSA-2026:54554
Vulnerability from csaf_redhat - Published: 2026-08-13 12:19 - Updated: 2026-08-24 12:16A flaw was found in the Python `Tarfile.extract()` function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the `filter` parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leading to unauthorized modifications or privilege issues on the system.
A flaw was found in Python's xml.etree.ElementPath component. This vulnerability can lead to a denial of service (DoS) when processing specially crafted XML documents. Specifically, certain XPath index predicates used with functions like Element.findall() and Element.iterfind() can cause the processing time to increase quadratically with the size of the input, making the system unresponsive. A remote attacker could exploit this by providing a malicious XML file, potentially disrupting service availability.
CWE-770 - Allocation of Resources Without Limits or ThrottlingA flaw was found in the `tarfile.extractall()` function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside the intended destination directory. This could lead to out-of-destination file reads or writes, potentially resulting in information disclosure or arbitrary file modification.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:python3-13-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-13-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-13-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in the Python `tarfile` module. When processing a specially crafted tar archive opened in 'streaming mode' (mode='r|'), the module does not properly handle the end-of-file (EOF) condition. This can cause the `tarfile` module to enter an infinite loop, leading to a Denial of Service (DoS) for applications processing such archives.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:python3-13-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-13-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-13-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in Python. Its incremental HTML parser can be exploited by a remote attacker. By sending specially crafted, uncontrolled data with repeated, incomplete markup declarations, the attacker can cause the system to consume excessive central processing unit (CPU) resources. This leads to a denial of service, making the affected system unresponsive.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:python3-13-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-13-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-13-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in the `csv.Sniffer.sniff()` function within Python. An attacker can exploit this by providing specially crafted CSV samples, which can trigger super-linear regular-expression processing during dialect sniffing. This excessive processing consumes significant CPU resources, potentially leading to a Denial of Service (DoS) for applications that process unbounded input using this function.
CWE-1333 - Inefficient Regular Expression Complexity| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:python3-13-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-13-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:python3-13-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\npython3.13:\n * python3.13-3.13.15-1.hum1 (aarch64, x86_64)\n * python3.13-debug-3.13.15-1.hum1 (aarch64, x86_64)\n * python3.13-devel-3.13.15-1.hum1 (aarch64, x86_64)\n * python3.13-freethreading-3.13.15-1.hum1 (aarch64, x86_64)\n * python3.13-freethreading-debug-3.13.15-1.hum1 (aarch64, x86_64)\n * python3.13-idle-3.13.15-1.hum1 (aarch64, x86_64)\n * python3.13-libs-3.13.15-1.hum1 (aarch64, x86_64)\n * python3.13-test-3.13.15-1.hum1 (aarch64, x86_64)\n * python3.13-tkinter-3.13.15-1.hum1 (aarch64, x86_64)\n * python3.13-3.13.15-1.hum1.src (src)\n\nSecurity Fix(es):\n\npython3.13:\n * CVE-2026-11940\n * CVE-2026-11972\n * CVE-2026-15308\n * CVE-2026-4360\n * CVE-2026-6879",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54554",
"url": "https://access.redhat.com/errata/RHSA-2026:54554"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-11940",
"url": "https://access.redhat.com/security/cve/CVE-2026-11940"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-11972",
"url": "https://access.redhat.com/security/cve/CVE-2026-11972"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-15308",
"url": "https://access.redhat.com/security/cve/CVE-2026-15308"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4360",
"url": "https://access.redhat.com/security/cve/CVE-2026-4360"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6879",
"url": "https://access.redhat.com/security/cve/CVE-2026-6879"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-18503",
"url": "https://access.redhat.com/security/cve/CVE-2026-18503"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54554.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
"tracking": {
"current_release_date": "2026-08-24T12:16:52+00:00",
"generator": {
"date": "2026-08-24T12:16:52+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54554",
"initial_release_date": "2026-08-13T12:19:42+00:00",
"revision_history": [
{
"date": "2026-08-13T12:19:42+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-24T12:16:52+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-13-main@aarch64",
"product": {
"name": "python3-13-main@aarch64",
"product_id": "python3-13-main@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.13@3.13.15-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-13-main@src",
"product": {
"name": "python3-13-main@src",
"product_id": "python3-13-main@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.13@3.13.15-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-13-main@x86_64",
"product": {
"name": "python3-13-main@x86_64",
"product_id": "python3-13-main@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.13@3.13.15-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-13-main@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:python3-13-main@aarch64"
},
"product_reference": "python3-13-main@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-13-main@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:python3-13-main@src"
},
"product_reference": "python3-13-main@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-13-main@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:python3-13-main@x86_64"
},
"product_reference": "python3-13-main@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-4360",
"cwe": {
"id": "CWE-279",
"name": "Incorrect Execution-Assigned Permissions"
},
"discovery_date": "2026-06-30T15:01:14.438690+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494987"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Python `Tarfile.extract()` function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the `filter` parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leading to unauthorized modifications or privilege issues on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Python Tarfile: Unexpected file ownership when extracting hardlinks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate flaw in Python\u0027s Tarfile module allows a local attacker with low privileges to achieve a high integrity impact. By tricking a user into extracting a specially crafted untrusted tar file containing hardlinks, the attacker could cause files to be written with unexpected ownership, potentially leading to unauthorized file modification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4360"
},
{
"category": "external",
"summary": "RHBZ#2494987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494987"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4360",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4360"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4360",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4360"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/151987",
"url": "https://github.com/python/cpython/issues/151987"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/151988",
"url": "https://github.com/python/cpython/pull/151988"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/TWZW2PC2AZOV6FENIHFSRC63OM7MBGSB/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/TWZW2PC2AZOV6FENIHFSRC63OM7MBGSB/"
}
],
"release_date": "2026-06-30T14:45:35.601000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T12:19:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54554"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python: Python Tarfile: Unexpected file ownership when extracting hardlinks"
},
{
"cve": "CVE-2026-6879",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-28T17:34:14.787326+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2508122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Python\u0027s xml.etree.ElementPath component. This vulnerability can lead to a denial of service (DoS) when processing specially crafted XML documents. Specifically, certain XPath index predicates used with functions like Element.findall() and Element.iterfind() can cause the processing time to increase quadratically with the size of the input, making the system unresponsive. A remote attacker could exploit this by providing a malicious XML file, potentially disrupting service availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Python: Performance degradation in XML processing due to quadratic time complexity",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6879"
},
{
"category": "external",
"summary": "RHBZ#2508122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6879",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6879"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6879",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6879"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/2ffab083782968a4d732738f4f1dff6bbd69d2b0",
"url": "https://github.com/python/cpython/commit/2ffab083782968a4d732738f4f1dff6bbd69d2b0"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/152674",
"url": "https://github.com/python/cpython/issues/152674"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/152676",
"url": "https://github.com/python/cpython/pull/152676"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/7YMZ6DDZVR26TJJBVO3RDNBAVGHNYAKR/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/7YMZ6DDZVR26TJJBVO3RDNBAVGHNYAKR/"
}
],
"release_date": "2026-07-28T13:46:30.650000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T12:19:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54554"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 2.2,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Python: Performance degradation in XML processing due to quadratic time complexity"
},
{
"cve": "CVE-2026-11940",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-06-23T17:05:33.822236+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2491848"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `tarfile.extractall()` function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside the intended destination directory. This could lead to out-of-destination file reads or writes, potentially resulting in information disclosure or arbitrary file modification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat products that appear in dependency searches under names containing \"tarfile\" but that are not the CPython standard-library tarfile module are not affected by this flaw. Matches such as the Go packages under github.com/containers/image / go.podman.io/image (.../docker/tarfile and .../docker/internal/tarfile) and the Apache Camel artifacts (camel-tarfile, camel-quarkus-tarfile) are unrelated implementations in other languages and do not include the vulnerable CPython tarfile.extractall() filter logic. The separately packaged PyPI component backports-tarfile is also out of scope for this CVE as assigned: it is not the CPython stdlib module named in the advisory and this CVE tracks the interpreter-provided tarfile shipped in Red Hat python3* packages.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11940"
},
{
"category": "external",
"summary": "RHBZ#2491848",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491848"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11940",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11940"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/151558",
"url": "https://github.com/python/cpython/issues/151558"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/151559",
"url": "https://github.com/python/cpython/pull/151559"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/"
}
],
"release_date": "2026-06-23T16:04:17.321000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T12:19:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54554"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory"
},
{
"cve": "CVE-2026-11972",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-06-23T23:01:07.338455+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492050"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Python `tarfile` module. When processing a specially crafted tar archive opened in \u0027streaming mode\u0027 (mode=\u0027r|\u0027), the module does not properly handle the end-of-file (EOF) condition. This can cause the `tarfile` module to enter an infinite loop, leading to a Denial of Service (DoS) for applications processing such archives.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Python tarfile module. When processing a tar archive in streaming mode (mode=\u0027r|\u0027), the _Stream.seek function does not properly check for end-of-file, which can cause an infinite loop when processing a specially crafted archive. Red Hat ships Python as part of many products, and applications using tarfile\u0027s streaming mode are potentially affected by this denial of service vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11972"
},
{
"category": "external",
"summary": "RHBZ#2492050",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492050"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11972",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11972"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11972",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11972"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/151981",
"url": "https://github.com/python/cpython/issues/151981"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/151982",
"url": "https://github.com/python/cpython/pull/151982"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/"
}
],
"release_date": "2026-06-23T22:02:45.434000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T12:19:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54554"
},
{
"category": "workaround",
"details": "Avoid using tarfile streaming mode (mode=\u0027r|\u0027) with untrusted tar archives. Use the standard file-based mode (mode=\u0027r\u0027) instead where possible.",
"product_ids": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode"
},
{
"cve": "CVE-2026-15308",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-07-09T18:02:10.090070+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498608"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Python. Its incremental HTML parser can be exploited by a remote attacker. By sending specially crafted, uncontrolled data with repeated, incomplete markup declarations, the attacker can cause the system to consume excessive central processing unit (CPU) resources. This leads to a denial of service, making the affected system unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Python\u0027s `html.parser.HTMLParser` can lead to a denial of service. By supplying specially crafted, malformed HTML with repeated unterminated markup declarations, an attacker can cause excessive CPU consumption, rendering the system unresponsive. Red Hat products utilizing this parser to process untrusted HTML content are susceptible to resource exhaustion.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15308"
},
{
"category": "external",
"summary": "RHBZ#2498608",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498608"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15308",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15308"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15308",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15308"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9",
"url": "https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced",
"url": "https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e606",
"url": "https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e606"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd",
"url": "https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/153030",
"url": "https://github.com/python/cpython/issues/153030"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/153031",
"url": "https://github.com/python/cpython/pull/153031"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/"
}
],
"release_date": "2026-07-09T17:10:57.317000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T12:19:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54554"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations"
},
{
"cve": "CVE-2026-18503",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-08-10T14:11:09.811226+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2513510"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `csv.Sniffer.sniff()` function within Python. An attacker can exploit this by providing specially crafted CSV samples, which can trigger super-linear regular-expression processing during dialect sniffing. This excessive processing consumes significant CPU resources, potentially leading to a Denial of Service (DoS) for applications that process unbounded input using this function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Python: Denial of Service via super-linear regular expression work in csv.Sniffer.sniff()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has evaluated this issue and determined it has a Low security impact. The csv.Sniffer.sniff() function in Python\u0027s standard library is vulnerable to excessive CPU consumption when processing specially crafted CSV input, due to quadratic time complexity in the dialect sniffing regex. Most applications are not affected as they use csv.reader() or csv.DictReader() directly without invoking the sniffing functionality.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-18503"
},
{
"category": "external",
"summary": "RHBZ#2513510",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513510"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18503",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18503"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18503",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18503"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/98820",
"url": "https://github.com/python/cpython/issues/98820"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/153694",
"url": "https://github.com/python/cpython/pull/153694"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/KQ7NBMCPAZJHRROQXJQE4GMXGLD5KHBS/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/KQ7NBMCPAZJHRROQXJQE4GMXGLD5KHBS/"
}
],
"release_date": "2026-08-10T13:45:31.618000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T12:19:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54554"
},
{
"category": "workaround",
"details": "Do not pass untrusted or unbounded CSV input to csv.Sniffer.sniff(). If dialect detection is needed, limit the size of the sample passed to sniff() or use a known dialect directly with csv.reader().",
"product_ids": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 2.8,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:python3-13-main@aarch64",
"Red Hat Hardened Images:python3-13-main@src",
"Red Hat Hardened Images:python3-13-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Python: Denial of Service via super-linear regular expression work in csv.Sniffer.sniff()"
}
]
}
SUSE-SU-2026:3635-1
Vulnerability from csaf_suse - Published: 2026-08-18 07:52 - Updated: 2026-08-18 07:52| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for python",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for python fixes the following issues:\n\n- CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the\n `configparser` module is used (bsc#1269066).\n- CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously\n crafted wheel archives (bsc#1257599).\n- CVE-2026-3219: python-pip: pip doesn\u0027t reject concatenated ZIP (bsc#1262467).\n- CVE-2026-3276: quadratic complexity in `unicodedata.normalize()` can lead to DoS when processing specially crafted\n Unicode input (bsc#1267581).\n- CVE-2026-6357: pip self-update functionality can import newly installed modules after wheel installation (bsc#1263442\n bsc#1263443).\n- CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding\n protection (bsc#1264962).\n- CVE-2026-8328: `ftpcp()` does not use actual peer address and trusts server-supplied PASV host address (bsc#1265268).\n- CVE-2026-8643: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite\n (bsc#1266669).\n- CVE-2026-11972: infinite loop due to improper EOF handling in the tarfile module streaming mode can lead to DoS\n (bsc#1269788).\n- CVE-2026-15308: Incremental HTMLParser allows CPU-exhaustion DoS via repeated unterminated markup declarations\n (bsc#1271192).\n- Regression in `http.cookies` (bsc#1263083).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-3635,SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-3635",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_3635-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:3635-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20263635-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:3635-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-August/049368.html"
},
{
"category": "self",
"summary": "SUSE Bug 1257599",
"url": "https://bugzilla.suse.com/1257599"
},
{
"category": "self",
"summary": "SUSE Bug 1262467",
"url": "https://bugzilla.suse.com/1262467"
},
{
"category": "self",
"summary": "SUSE Bug 1263083",
"url": "https://bugzilla.suse.com/1263083"
},
{
"category": "self",
"summary": "SUSE Bug 1263442",
"url": "https://bugzilla.suse.com/1263442"
},
{
"category": "self",
"summary": "SUSE Bug 1263443",
"url": "https://bugzilla.suse.com/1263443"
},
{
"category": "self",
"summary": "SUSE Bug 1264962",
"url": "https://bugzilla.suse.com/1264962"
},
{
"category": "self",
"summary": "SUSE Bug 1265268",
"url": "https://bugzilla.suse.com/1265268"
},
{
"category": "self",
"summary": "SUSE Bug 1266669",
"url": "https://bugzilla.suse.com/1266669"
},
{
"category": "self",
"summary": "SUSE Bug 1267581",
"url": "https://bugzilla.suse.com/1267581"
},
{
"category": "self",
"summary": "SUSE Bug 1269066",
"url": "https://bugzilla.suse.com/1269066"
},
{
"category": "self",
"summary": "SUSE Bug 1269788",
"url": "https://bugzilla.suse.com/1269788"
},
{
"category": "self",
"summary": "SUSE Bug 1271192",
"url": "https://bugzilla.suse.com/1271192"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-0864 page",
"url": "https://www.suse.com/security/cve/CVE-2026-0864/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11972 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-15308 page",
"url": "https://www.suse.com/security/cve/CVE-2026-15308/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-1703 page",
"url": "https://www.suse.com/security/cve/CVE-2026-1703/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-3219 page",
"url": "https://www.suse.com/security/cve/CVE-2026-3219/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-3276 page",
"url": "https://www.suse.com/security/cve/CVE-2026-3276/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6357 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6357/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7210 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7210/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-8328 page",
"url": "https://www.suse.com/security/cve/CVE-2026-8328/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-8643 page",
"url": "https://www.suse.com/security/cve/CVE-2026-8643/"
}
],
"title": "Security update for python",
"tracking": {
"current_release_date": "2026-08-18T07:52:16Z",
"generator": {
"date": "2026-08-18T07:52:16Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:3635-1",
"initial_release_date": "2026-08-18T07:52:16Z",
"revision_history": [
{
"date": "2026-08-18T07:52:16Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"product": {
"name": "libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"product_id": "libpython2_7-1_0-2.7.18-150000.123.1.aarch64"
}
},
{
"category": "product_version",
"name": "python-2.7.18-150000.123.1.aarch64",
"product": {
"name": "python-2.7.18-150000.123.1.aarch64",
"product_id": "python-2.7.18-150000.123.1.aarch64"
}
},
{
"category": "product_version",
"name": "python-base-2.7.18-150000.123.1.aarch64",
"product": {
"name": "python-base-2.7.18-150000.123.1.aarch64",
"product_id": "python-base-2.7.18-150000.123.1.aarch64"
}
},
{
"category": "product_version",
"name": "python-curses-2.7.18-150000.123.1.aarch64",
"product": {
"name": "python-curses-2.7.18-150000.123.1.aarch64",
"product_id": "python-curses-2.7.18-150000.123.1.aarch64"
}
},
{
"category": "product_version",
"name": "python-demo-2.7.18-150000.123.1.aarch64",
"product": {
"name": "python-demo-2.7.18-150000.123.1.aarch64",
"product_id": "python-demo-2.7.18-150000.123.1.aarch64"
}
},
{
"category": "product_version",
"name": "python-devel-2.7.18-150000.123.1.aarch64",
"product": {
"name": "python-devel-2.7.18-150000.123.1.aarch64",
"product_id": "python-devel-2.7.18-150000.123.1.aarch64"
}
},
{
"category": "product_version",
"name": "python-gdbm-2.7.18-150000.123.1.aarch64",
"product": {
"name": "python-gdbm-2.7.18-150000.123.1.aarch64",
"product_id": "python-gdbm-2.7.18-150000.123.1.aarch64"
}
},
{
"category": "product_version",
"name": "python-idle-2.7.18-150000.123.1.aarch64",
"product": {
"name": "python-idle-2.7.18-150000.123.1.aarch64",
"product_id": "python-idle-2.7.18-150000.123.1.aarch64"
}
},
{
"category": "product_version",
"name": "python-tk-2.7.18-150000.123.1.aarch64",
"product": {
"name": "python-tk-2.7.18-150000.123.1.aarch64",
"product_id": "python-tk-2.7.18-150000.123.1.aarch64"
}
},
{
"category": "product_version",
"name": "python-xml-2.7.18-150000.123.1.aarch64",
"product": {
"name": "python-xml-2.7.18-150000.123.1.aarch64",
"product_id": "python-xml-2.7.18-150000.123.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libpython2_7-1_0-64bit-2.7.18-150000.123.1.aarch64_ilp32",
"product": {
"name": "libpython2_7-1_0-64bit-2.7.18-150000.123.1.aarch64_ilp32",
"product_id": "libpython2_7-1_0-64bit-2.7.18-150000.123.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "python-64bit-2.7.18-150000.123.1.aarch64_ilp32",
"product": {
"name": "python-64bit-2.7.18-150000.123.1.aarch64_ilp32",
"product_id": "python-64bit-2.7.18-150000.123.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "python-base-64bit-2.7.18-150000.123.1.aarch64_ilp32",
"product": {
"name": "python-base-64bit-2.7.18-150000.123.1.aarch64_ilp32",
"product_id": "python-base-64bit-2.7.18-150000.123.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libpython2_7-1_0-2.7.18-150000.123.1.i586",
"product": {
"name": "libpython2_7-1_0-2.7.18-150000.123.1.i586",
"product_id": "libpython2_7-1_0-2.7.18-150000.123.1.i586"
}
},
{
"category": "product_version",
"name": "python-2.7.18-150000.123.1.i586",
"product": {
"name": "python-2.7.18-150000.123.1.i586",
"product_id": "python-2.7.18-150000.123.1.i586"
}
},
{
"category": "product_version",
"name": "python-base-2.7.18-150000.123.1.i586",
"product": {
"name": "python-base-2.7.18-150000.123.1.i586",
"product_id": "python-base-2.7.18-150000.123.1.i586"
}
},
{
"category": "product_version",
"name": "python-curses-2.7.18-150000.123.1.i586",
"product": {
"name": "python-curses-2.7.18-150000.123.1.i586",
"product_id": "python-curses-2.7.18-150000.123.1.i586"
}
},
{
"category": "product_version",
"name": "python-demo-2.7.18-150000.123.1.i586",
"product": {
"name": "python-demo-2.7.18-150000.123.1.i586",
"product_id": "python-demo-2.7.18-150000.123.1.i586"
}
},
{
"category": "product_version",
"name": "python-devel-2.7.18-150000.123.1.i586",
"product": {
"name": "python-devel-2.7.18-150000.123.1.i586",
"product_id": "python-devel-2.7.18-150000.123.1.i586"
}
},
{
"category": "product_version",
"name": "python-gdbm-2.7.18-150000.123.1.i586",
"product": {
"name": "python-gdbm-2.7.18-150000.123.1.i586",
"product_id": "python-gdbm-2.7.18-150000.123.1.i586"
}
},
{
"category": "product_version",
"name": "python-idle-2.7.18-150000.123.1.i586",
"product": {
"name": "python-idle-2.7.18-150000.123.1.i586",
"product_id": "python-idle-2.7.18-150000.123.1.i586"
}
},
{
"category": "product_version",
"name": "python-tk-2.7.18-150000.123.1.i586",
"product": {
"name": "python-tk-2.7.18-150000.123.1.i586",
"product_id": "python-tk-2.7.18-150000.123.1.i586"
}
},
{
"category": "product_version",
"name": "python-xml-2.7.18-150000.123.1.i586",
"product": {
"name": "python-xml-2.7.18-150000.123.1.i586",
"product_id": "python-xml-2.7.18-150000.123.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "python-doc-2.7.18-150000.123.1.noarch",
"product": {
"name": "python-doc-2.7.18-150000.123.1.noarch",
"product_id": "python-doc-2.7.18-150000.123.1.noarch"
}
},
{
"category": "product_version",
"name": "python-doc-pdf-2.7.18-150000.123.1.noarch",
"product": {
"name": "python-doc-pdf-2.7.18-150000.123.1.noarch",
"product_id": "python-doc-pdf-2.7.18-150000.123.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"product": {
"name": "libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"product_id": "libpython2_7-1_0-2.7.18-150000.123.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python-2.7.18-150000.123.1.ppc64le",
"product": {
"name": "python-2.7.18-150000.123.1.ppc64le",
"product_id": "python-2.7.18-150000.123.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python-base-2.7.18-150000.123.1.ppc64le",
"product": {
"name": "python-base-2.7.18-150000.123.1.ppc64le",
"product_id": "python-base-2.7.18-150000.123.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python-curses-2.7.18-150000.123.1.ppc64le",
"product": {
"name": "python-curses-2.7.18-150000.123.1.ppc64le",
"product_id": "python-curses-2.7.18-150000.123.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python-demo-2.7.18-150000.123.1.ppc64le",
"product": {
"name": "python-demo-2.7.18-150000.123.1.ppc64le",
"product_id": "python-demo-2.7.18-150000.123.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python-devel-2.7.18-150000.123.1.ppc64le",
"product": {
"name": "python-devel-2.7.18-150000.123.1.ppc64le",
"product_id": "python-devel-2.7.18-150000.123.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python-gdbm-2.7.18-150000.123.1.ppc64le",
"product": {
"name": "python-gdbm-2.7.18-150000.123.1.ppc64le",
"product_id": "python-gdbm-2.7.18-150000.123.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python-idle-2.7.18-150000.123.1.ppc64le",
"product": {
"name": "python-idle-2.7.18-150000.123.1.ppc64le",
"product_id": "python-idle-2.7.18-150000.123.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python-tk-2.7.18-150000.123.1.ppc64le",
"product": {
"name": "python-tk-2.7.18-150000.123.1.ppc64le",
"product_id": "python-tk-2.7.18-150000.123.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python-xml-2.7.18-150000.123.1.ppc64le",
"product": {
"name": "python-xml-2.7.18-150000.123.1.ppc64le",
"product_id": "python-xml-2.7.18-150000.123.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"product": {
"name": "libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"product_id": "libpython2_7-1_0-2.7.18-150000.123.1.s390x"
}
},
{
"category": "product_version",
"name": "python-2.7.18-150000.123.1.s390x",
"product": {
"name": "python-2.7.18-150000.123.1.s390x",
"product_id": "python-2.7.18-150000.123.1.s390x"
}
},
{
"category": "product_version",
"name": "python-base-2.7.18-150000.123.1.s390x",
"product": {
"name": "python-base-2.7.18-150000.123.1.s390x",
"product_id": "python-base-2.7.18-150000.123.1.s390x"
}
},
{
"category": "product_version",
"name": "python-curses-2.7.18-150000.123.1.s390x",
"product": {
"name": "python-curses-2.7.18-150000.123.1.s390x",
"product_id": "python-curses-2.7.18-150000.123.1.s390x"
}
},
{
"category": "product_version",
"name": "python-demo-2.7.18-150000.123.1.s390x",
"product": {
"name": "python-demo-2.7.18-150000.123.1.s390x",
"product_id": "python-demo-2.7.18-150000.123.1.s390x"
}
},
{
"category": "product_version",
"name": "python-devel-2.7.18-150000.123.1.s390x",
"product": {
"name": "python-devel-2.7.18-150000.123.1.s390x",
"product_id": "python-devel-2.7.18-150000.123.1.s390x"
}
},
{
"category": "product_version",
"name": "python-gdbm-2.7.18-150000.123.1.s390x",
"product": {
"name": "python-gdbm-2.7.18-150000.123.1.s390x",
"product_id": "python-gdbm-2.7.18-150000.123.1.s390x"
}
},
{
"category": "product_version",
"name": "python-idle-2.7.18-150000.123.1.s390x",
"product": {
"name": "python-idle-2.7.18-150000.123.1.s390x",
"product_id": "python-idle-2.7.18-150000.123.1.s390x"
}
},
{
"category": "product_version",
"name": "python-tk-2.7.18-150000.123.1.s390x",
"product": {
"name": "python-tk-2.7.18-150000.123.1.s390x",
"product_id": "python-tk-2.7.18-150000.123.1.s390x"
}
},
{
"category": "product_version",
"name": "python-xml-2.7.18-150000.123.1.s390x",
"product": {
"name": "python-xml-2.7.18-150000.123.1.s390x",
"product_id": "python-xml-2.7.18-150000.123.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"product": {
"name": "libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"product_id": "libpython2_7-1_0-2.7.18-150000.123.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpython2_7-1_0-32bit-2.7.18-150000.123.1.x86_64",
"product": {
"name": "libpython2_7-1_0-32bit-2.7.18-150000.123.1.x86_64",
"product_id": "libpython2_7-1_0-32bit-2.7.18-150000.123.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-2.7.18-150000.123.1.x86_64",
"product": {
"name": "python-2.7.18-150000.123.1.x86_64",
"product_id": "python-2.7.18-150000.123.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-32bit-2.7.18-150000.123.1.x86_64",
"product": {
"name": "python-32bit-2.7.18-150000.123.1.x86_64",
"product_id": "python-32bit-2.7.18-150000.123.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-base-2.7.18-150000.123.1.x86_64",
"product": {
"name": "python-base-2.7.18-150000.123.1.x86_64",
"product_id": "python-base-2.7.18-150000.123.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-base-32bit-2.7.18-150000.123.1.x86_64",
"product": {
"name": "python-base-32bit-2.7.18-150000.123.1.x86_64",
"product_id": "python-base-32bit-2.7.18-150000.123.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-curses-2.7.18-150000.123.1.x86_64",
"product": {
"name": "python-curses-2.7.18-150000.123.1.x86_64",
"product_id": "python-curses-2.7.18-150000.123.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-demo-2.7.18-150000.123.1.x86_64",
"product": {
"name": "python-demo-2.7.18-150000.123.1.x86_64",
"product_id": "python-demo-2.7.18-150000.123.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-devel-2.7.18-150000.123.1.x86_64",
"product": {
"name": "python-devel-2.7.18-150000.123.1.x86_64",
"product_id": "python-devel-2.7.18-150000.123.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-gdbm-2.7.18-150000.123.1.x86_64",
"product": {
"name": "python-gdbm-2.7.18-150000.123.1.x86_64",
"product_id": "python-gdbm-2.7.18-150000.123.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-idle-2.7.18-150000.123.1.x86_64",
"product": {
"name": "python-idle-2.7.18-150000.123.1.x86_64",
"product_id": "python-idle-2.7.18-150000.123.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-tk-2.7.18-150000.123.1.x86_64",
"product": {
"name": "python-tk-2.7.18-150000.123.1.x86_64",
"product_id": "python-tk-2.7.18-150000.123.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-xml-2.7.18-150000.123.1.x86_64",
"product": {
"name": "python-xml-2.7.18-150000.123.1.x86_64",
"product_id": "python-xml-2.7.18-150000.123.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:packagehub:15:sp7"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libpython2_7-1_0-2.7.18-150000.123.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64"
},
"product_reference": "libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpython2_7-1_0-2.7.18-150000.123.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le"
},
"product_reference": "libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpython2_7-1_0-2.7.18-150000.123.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x"
},
"product_reference": "libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpython2_7-1_0-2.7.18-150000.123.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64"
},
"product_reference": "libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-2.7.18-150000.123.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64"
},
"product_reference": "python-2.7.18-150000.123.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-2.7.18-150000.123.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le"
},
"product_reference": "python-2.7.18-150000.123.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-2.7.18-150000.123.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x"
},
"product_reference": "python-2.7.18-150000.123.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-2.7.18-150000.123.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64"
},
"product_reference": "python-2.7.18-150000.123.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-base-2.7.18-150000.123.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64"
},
"product_reference": "python-base-2.7.18-150000.123.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-base-2.7.18-150000.123.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le"
},
"product_reference": "python-base-2.7.18-150000.123.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-base-2.7.18-150000.123.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x"
},
"product_reference": "python-base-2.7.18-150000.123.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-base-2.7.18-150000.123.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64"
},
"product_reference": "python-base-2.7.18-150000.123.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-curses-2.7.18-150000.123.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64"
},
"product_reference": "python-curses-2.7.18-150000.123.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-curses-2.7.18-150000.123.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le"
},
"product_reference": "python-curses-2.7.18-150000.123.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-curses-2.7.18-150000.123.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x"
},
"product_reference": "python-curses-2.7.18-150000.123.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-curses-2.7.18-150000.123.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64"
},
"product_reference": "python-curses-2.7.18-150000.123.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gdbm-2.7.18-150000.123.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64"
},
"product_reference": "python-gdbm-2.7.18-150000.123.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gdbm-2.7.18-150000.123.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le"
},
"product_reference": "python-gdbm-2.7.18-150000.123.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gdbm-2.7.18-150000.123.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x"
},
"product_reference": "python-gdbm-2.7.18-150000.123.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gdbm-2.7.18-150000.123.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64"
},
"product_reference": "python-gdbm-2.7.18-150000.123.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-xml-2.7.18-150000.123.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64"
},
"product_reference": "python-xml-2.7.18-150000.123.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-xml-2.7.18-150000.123.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le"
},
"product_reference": "python-xml-2.7.18-150000.123.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-xml-2.7.18-150000.123.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x"
},
"product_reference": "python-xml-2.7.18-150000.123.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-xml-2.7.18-150000.123.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
},
"product_reference": "python-xml-2.7.18-150000.123.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-0864",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-0864"
}
],
"notes": [
{
"category": "general",
"text": "When using the \"configparser\" module to write configuration files\ncontaining multi-line text values with carriage return characters (\\r) the\nresulting file could be injected with unexpected keys and values if the\nattacker controls the written value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-0864",
"url": "https://www.suse.com/security/cve/CVE-2026-0864"
},
{
"category": "external",
"summary": "SUSE Bug 1269066 for CVE-2026-0864",
"url": "https://bugzilla.suse.com/1269066"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T07:52:16Z",
"details": "important"
}
],
"title": "CVE-2026-0864"
},
{
"cve": "CVE-2026-11972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11972"
}
],
"notes": [
{
"category": "general",
"text": "When using the \"tarfile\" module with a file opened in \"streaming mode\" (mode=\"r|\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11972",
"url": "https://www.suse.com/security/cve/CVE-2026-11972"
},
{
"category": "external",
"summary": "SUSE Bug 1269788 for CVE-2026-11972",
"url": "https://bugzilla.suse.com/1269788"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T07:52:16Z",
"details": "important"
}
],
"title": "CVE-2026-11972"
},
{
"cve": "CVE-2026-15308",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-15308"
}
],
"notes": [
{
"category": "general",
"text": "The incremental HTML parser (html.parser.HTMLParser) allows for CPU\ndenial-of-service through repeated unterminated markup declarations when\nprocessing uncontrolled data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-15308",
"url": "https://www.suse.com/security/cve/CVE-2026-15308"
},
{
"category": "external",
"summary": "SUSE Bug 1271192 for CVE-2026-15308",
"url": "https://bugzilla.suse.com/1271192"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T07:52:16Z",
"details": "important"
}
],
"title": "CVE-2026-15308"
},
{
"cve": "CVE-2026-1703",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-1703"
}
],
"notes": [
{
"category": "general",
"text": "When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn\u0027t able to inject or overwrite executable files in typical situations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-1703",
"url": "https://www.suse.com/security/cve/CVE-2026-1703"
},
{
"category": "external",
"summary": "SUSE Bug 1257599 for CVE-2026-1703",
"url": "https://bugzilla.suse.com/1257599"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T07:52:16Z",
"details": "low"
}
],
"title": "CVE-2026-1703"
},
{
"cve": "CVE-2026-3219",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-3219"
}
],
"notes": [
{
"category": "general",
"text": "pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing \"incorrect\" files according to the filename of the archive. New behavior only proceeds with installation if the file identifies uniquely as a ZIP or tar archive, not as both.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-3219",
"url": "https://www.suse.com/security/cve/CVE-2026-3219"
},
{
"category": "external",
"summary": "SUSE Bug 1262429 for CVE-2026-3219",
"url": "https://bugzilla.suse.com/1262429"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T07:52:16Z",
"details": "moderate"
}
],
"title": "CVE-2026-3219"
},
{
"cve": "CVE-2026-3276",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-3276"
}
],
"notes": [
{
"category": "general",
"text": "unicodedata.normalize() can take excessive CPU time when processing\nspecially crafted Unicode input containing long runs of combining characters\nwith alternating Canonical Combining Class values.\nThis affects all normalization forms.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-3276",
"url": "https://www.suse.com/security/cve/CVE-2026-3276"
},
{
"category": "external",
"summary": "SUSE Bug 1267581 for CVE-2026-3276",
"url": "https://bugzilla.suse.com/1267581"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T07:52:16Z",
"details": "important"
}
],
"title": "CVE-2026-3276"
},
{
"cve": "CVE-2026-6357",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6357"
}
],
"notes": [
{
"category": "general",
"text": "pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports were intentionally deferred to increase startup time of the pip CLI. The patch changes self-update functionality to run before wheels are installed to prevent newly-installed modules from being imported shortly after the installation of a wheel package. Users should still review package contents prior to installation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6357",
"url": "https://www.suse.com/security/cve/CVE-2026-6357"
},
{
"category": "external",
"summary": "SUSE Bug 1263442 for CVE-2026-6357",
"url": "https://bugzilla.suse.com/1263442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T07:52:16Z",
"details": "moderate"
}
],
"title": "CVE-2026-6357"
},
{
"cve": "CVE-2026-7210",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7210"
}
],
"notes": [
{
"category": "general",
"text": "`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7210",
"url": "https://www.suse.com/security/cve/CVE-2026-7210"
},
{
"category": "external",
"summary": "SUSE Bug 1264962 for CVE-2026-7210",
"url": "https://bugzilla.suse.com/1264962"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T07:52:16Z",
"details": "important"
}
],
"title": "CVE-2026-7210"
},
{
"cve": "CVE-2026-8328",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-8328"
}
],
"notes": [
{
"category": "general",
"text": "The ftpcp() function in Lib/ftplib.py was not updated when \nCVE-2021-4189 was fixed. While makepasv() was patched to replace \nserver-supplied PASV host addresses with the actual peer address \n(getpeername()[0]), ftpcp() still calls parse227() directly and passes \nthe raw attacker-controllable IP address and port to target.sendport(). This patch is related to CVE-2021-4189.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-8328",
"url": "https://www.suse.com/security/cve/CVE-2026-8328"
},
{
"category": "external",
"summary": "SUSE Bug 1265268 for CVE-2026-8328",
"url": "https://bugzilla.suse.com/1265268"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T07:52:16Z",
"details": "moderate"
}
],
"title": "CVE-2026-8328"
},
{
"cve": "CVE-2026-8643",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-8643"
}
],
"notes": [
{
"category": "general",
"text": "pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-8643",
"url": "https://www.suse.com/security/cve/CVE-2026-8643"
},
{
"category": "external",
"summary": "SUSE Bug 1266669 for CVE-2026-8643",
"url": "https://bugzilla.suse.com/1266669"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-gdbm-2.7.18-150000.123.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:python-xml-2.7.18-150000.123.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T07:52:16Z",
"details": "important"
}
],
"title": "CVE-2026-8643"
}
]
}
ubuntu-cve-2026-11972
Vulnerability from osv_ubuntu
When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "idle-python2.7",
"binary_version": "2.7.6-8ubuntu0.6+esm29"
},
{
"binary_name": "libpython2.7",
"binary_version": "2.7.6-8ubuntu0.6+esm29"
},
{
"binary_name": "libpython2.7-minimal",
"binary_version": "2.7.6-8ubuntu0.6+esm29"
},
{
"binary_name": "libpython2.7-stdlib",
"binary_version": "2.7.6-8ubuntu0.6+esm29"
},
{
"binary_name": "libpython2.7-testsuite",
"binary_version": "2.7.6-8ubuntu0.6+esm29"
},
{
"binary_name": "python2.7",
"binary_version": "2.7.6-8ubuntu0.6+esm29"
},
{
"binary_name": "python2.7-examples",
"binary_version": "2.7.6-8ubuntu0.6+esm29"
},
{
"binary_name": "python2.7-minimal",
"binary_version": "2.7.6-8ubuntu0.6+esm29"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:14.04:LTS",
"name": "python2.7",
"purl": "pkg:deb/ubuntu/python2.7@2.7.6-8ubuntu0.6+esm29?arch=source\u0026distro=esm-infra-legacy/trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2.7.5-8ubuntu3",
"2.7.5-8ubuntu4",
"2.7.6-2",
"2.7.6-2ubuntu1",
"2.7.6-3",
"2.7.6-3ubuntu1",
"2.7.6-4",
"2.7.6-4ubuntu1",
"2.7.6-5",
"2.7.6-7",
"2.7.6-8",
"2.7.6-8ubuntu0.2",
"2.7.6-8ubuntu0.3",
"2.7.6-8ubuntu0.4",
"2.7.6-8ubuntu0.5",
"2.7.6-8ubuntu0.6+esm2",
"2.7.6-8ubuntu0.6+esm3",
"2.7.6-8ubuntu0.6+esm5",
"2.7.6-8ubuntu0.6+esm6",
"2.7.6-8ubuntu0.6+esm7",
"2.7.6-8ubuntu0.6+esm8",
"2.7.6-8ubuntu0.6+esm9",
"2.7.6-8ubuntu0.6+esm10",
"2.7.6-8ubuntu0.6+esm11",
"2.7.6-8ubuntu0.6+esm12",
"2.7.6-8ubuntu0.6+esm13",
"2.7.6-8ubuntu0.6+esm14",
"2.7.6-8ubuntu0.6+esm15",
"2.7.6-8ubuntu0.6+esm16",
"2.7.6-8ubuntu0.6+esm17",
"2.7.6-8ubuntu0.6+esm18",
"2.7.6-8ubuntu0.6+esm20",
"2.7.6-8ubuntu0.6+esm21",
"2.7.6-8ubuntu0.6+esm22",
"2.7.6-8ubuntu0.6+esm24",
"2.7.6-8ubuntu0.6+esm25",
"2.7.6-8ubuntu0.6+esm26",
"2.7.6-8ubuntu0.6+esm28",
"2.7.6-8ubuntu0.6+esm29"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "idle-python3.4",
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm20"
},
{
"binary_name": "libpython3.4",
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm20"
},
{
"binary_name": "libpython3.4-minimal",
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm20"
},
{
"binary_name": "libpython3.4-stdlib",
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm20"
},
{
"binary_name": "libpython3.4-testsuite",
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm20"
},
{
"binary_name": "python3.4",
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm20"
},
{
"binary_name": "python3.4-examples",
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm20"
},
{
"binary_name": "python3.4-minimal",
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm20"
},
{
"binary_name": "python3.4-venv",
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm20"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:14.04:LTS",
"name": "python3.4",
"purl": "pkg:deb/ubuntu/python3.4@3.4.3-1ubuntu1~14.04.7+esm20?arch=source\u0026distro=esm-infra-legacy/trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.4~b1-0ubuntu3",
"3.4~b1-4ubuntu4",
"3.4~b1-4ubuntu6",
"3.4~b1-5ubuntu2",
"3.4~b2-1",
"3.4~b3-1ubuntu1",
"3.4~rc1-1build1",
"3.4~rc2-1",
"3.4~rc3-0ubuntu1",
"3.4.0-1",
"3.4.0-2ubuntu1",
"3.4.0-2ubuntu1.1",
"3.4.3-1ubuntu1~14.04.1",
"3.4.3-1ubuntu1~14.04.3",
"3.4.3-1ubuntu1~14.04.4",
"3.4.3-1ubuntu1~14.04.5",
"3.4.3-1ubuntu1~14.04.6",
"3.4.3-1ubuntu1~14.04.7",
"3.4.3-1ubuntu1~14.04.7+esm2",
"3.4.3-1ubuntu1~14.04.7+esm4",
"3.4.3-1ubuntu1~14.04.7+esm6",
"3.4.3-1ubuntu1~14.04.7+esm7",
"3.4.3-1ubuntu1~14.04.7+esm8",
"3.4.3-1ubuntu1~14.04.7+esm10",
"3.4.3-1ubuntu1~14.04.7+esm11",
"3.4.3-1ubuntu1~14.04.7+esm12",
"3.4.3-1ubuntu1~14.04.7+esm13",
"3.4.3-1ubuntu1~14.04.7+esm14",
"3.4.3-1ubuntu1~14.04.7+esm15",
"3.4.3-1ubuntu1~14.04.7+esm16",
"3.4.3-1ubuntu1~14.04.7+esm17",
"3.4.3-1ubuntu1~14.04.7+esm19",
"3.4.3-1ubuntu1~14.04.7+esm20"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "idle-python3.5",
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm10"
},
{
"binary_name": "libpython3.5",
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm10"
},
{
"binary_name": "libpython3.5-minimal",
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm10"
},
{
"binary_name": "libpython3.5-stdlib",
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm10"
},
{
"binary_name": "libpython3.5-testsuite",
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm10"
},
{
"binary_name": "python3.5",
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm10"
},
{
"binary_name": "python3.5-examples",
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm10"
},
{
"binary_name": "python3.5-minimal",
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm10"
},
{
"binary_name": "python3.5-venv",
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm10"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:14.04:LTS",
"name": "python3.5",
"purl": "pkg:deb/ubuntu/python3.5@3.5.2-2ubuntu0~16.04.4~14.04.1+esm10?arch=source\u0026distro=esm-infra-legacy/trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.5.2-2ubuntu0~16.04.4~14.04.1",
"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1",
"3.5.2-2ubuntu0~16.04.4~14.04.1+esm3",
"3.5.2-2ubuntu0~16.04.4~14.04.1+esm4",
"3.5.2-2ubuntu0~16.04.4~14.04.1+esm5",
"3.5.2-2ubuntu0~16.04.4~14.04.1+esm6",
"3.5.2-2ubuntu0~16.04.4~14.04.1+esm7",
"3.5.2-2ubuntu0~16.04.4~14.04.1+esm8",
"3.5.2-2ubuntu0~16.04.4~14.04.1+esm9",
"3.5.2-2ubuntu0~16.04.4~14.04.1+esm10"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "idle-python2.7",
"binary_version": "2.7.12-1ubuntu0~16.04.18+esm21"
},
{
"binary_name": "libpython2.7",
"binary_version": "2.7.12-1ubuntu0~16.04.18+esm21"
},
{
"binary_name": "libpython2.7-minimal",
"binary_version": "2.7.12-1ubuntu0~16.04.18+esm21"
},
{
"binary_name": "libpython2.7-stdlib",
"binary_version": "2.7.12-1ubuntu0~16.04.18+esm21"
},
{
"binary_name": "libpython2.7-testsuite",
"binary_version": "2.7.12-1ubuntu0~16.04.18+esm21"
},
{
"binary_name": "python2.7",
"binary_version": "2.7.12-1ubuntu0~16.04.18+esm21"
},
{
"binary_name": "python2.7-examples",
"binary_version": "2.7.12-1ubuntu0~16.04.18+esm21"
},
{
"binary_name": "python2.7-minimal",
"binary_version": "2.7.12-1ubuntu0~16.04.18+esm21"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "python2.7",
"purl": "pkg:deb/ubuntu/python2.7@2.7.12-1ubuntu0~16.04.18+esm21?arch=source\u0026distro=esm-infra-legacy/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2.7.10-4ubuntu1",
"2.7.10-4ubuntu2",
"2.7.11-2",
"2.7.11-3",
"2.7.11-4",
"2.7.11-6",
"2.7.11-7",
"2.7.11-7ubuntu1",
"2.7.12-1~16.04",
"2.7.12-1ubuntu0~16.04.1",
"2.7.12-1ubuntu0~16.04.2",
"2.7.12-1ubuntu0~16.04.3",
"2.7.12-1ubuntu0~16.04.4",
"2.7.12-1ubuntu0~16.04.8",
"2.7.12-1ubuntu0~16.04.9",
"2.7.12-1ubuntu0~16.04.11",
"2.7.12-1ubuntu0~16.04.12",
"2.7.12-1ubuntu0~16.04.13",
"2.7.12-1ubuntu0~16.04.14",
"2.7.12-1ubuntu0~16.04.16",
"2.7.12-1ubuntu0~16.04.18",
"2.7.12-1ubuntu0~16.04.18+esm1",
"2.7.12-1ubuntu0~16.04.18+esm2",
"2.7.12-1ubuntu0~16.04.18+esm3",
"2.7.12-1ubuntu0~16.04.18+esm4",
"2.7.12-1ubuntu0~16.04.18+esm5",
"2.7.12-1ubuntu0~16.04.18+esm6",
"2.7.12-1ubuntu0~16.04.18+esm7",
"2.7.12-1ubuntu0~16.04.18+esm8",
"2.7.12-1ubuntu0~16.04.18+esm9",
"2.7.12-1ubuntu0~16.04.18+esm10",
"2.7.12-1ubuntu0~16.04.18+esm11",
"2.7.12-1ubuntu0~16.04.18+esm12",
"2.7.12-1ubuntu0~16.04.18+esm13",
"2.7.12-1ubuntu0~16.04.18+esm15",
"2.7.12-1ubuntu0~16.04.18+esm16",
"2.7.12-1ubuntu0~16.04.18+esm17",
"2.7.12-1ubuntu0~16.04.18+esm18",
"2.7.12-1ubuntu0~16.04.18+esm19",
"2.7.12-1ubuntu0~16.04.18+esm20",
"2.7.12-1ubuntu0~16.04.18+esm21"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "idle-python3.5",
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm24"
},
{
"binary_name": "libpython3.5",
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm24"
},
{
"binary_name": "libpython3.5-minimal",
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm24"
},
{
"binary_name": "libpython3.5-stdlib",
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm24"
},
{
"binary_name": "libpython3.5-testsuite",
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm24"
},
{
"binary_name": "python3.5",
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm24"
},
{
"binary_name": "python3.5-examples",
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm24"
},
{
"binary_name": "python3.5-minimal",
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm24"
},
{
"binary_name": "python3.5-venv",
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm24"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "python3.5",
"purl": "pkg:deb/ubuntu/python3.5@3.5.2-2ubuntu0~16.04.13+esm24?arch=source\u0026distro=esm-infra-legacy/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.5.0-3",
"3.5.0-3ubuntu1",
"3.5.1~rc1-2ubuntu1",
"3.5.1-1",
"3.5.1-2",
"3.5.1-3",
"3.5.1-5",
"3.5.1-6ubuntu1",
"3.5.1-6ubuntu2",
"3.5.1-9ubuntu1",
"3.5.1-10",
"3.5.2-2~16.01",
"3.5.2-2~16.04",
"3.5.2-2ubuntu0~16.04.1",
"3.5.2-2ubuntu0~16.04.2",
"3.5.2-2ubuntu0~16.04.3",
"3.5.2-2ubuntu0~16.04.4",
"3.5.2-2ubuntu0~16.04.5",
"3.5.2-2ubuntu0~16.04.8",
"3.5.2-2ubuntu0~16.04.9",
"3.5.2-2ubuntu0~16.04.10",
"3.5.2-2ubuntu0~16.04.11",
"3.5.2-2ubuntu0~16.04.12",
"3.5.2-2ubuntu0~16.04.13",
"3.5.2-2ubuntu0~16.04.13+esm1",
"3.5.2-2ubuntu0~16.04.13+esm2",
"3.5.2-2ubuntu0~16.04.13+esm3",
"3.5.2-2ubuntu0~16.04.13+esm5",
"3.5.2-2ubuntu0~16.04.13+esm6",
"3.5.2-2ubuntu0~16.04.13+esm7",
"3.5.2-2ubuntu0~16.04.13+esm8",
"3.5.2-2ubuntu0~16.04.13+esm9",
"3.5.2-2ubuntu0~16.04.13+esm10",
"3.5.2-2ubuntu0~16.04.13+esm11",
"3.5.2-2ubuntu0~16.04.13+esm12",
"3.5.2-2ubuntu0~16.04.13+esm13",
"3.5.2-2ubuntu0~16.04.13+esm14",
"3.5.2-2ubuntu0~16.04.13+esm15",
"3.5.2-2ubuntu0~16.04.13+esm16",
"3.5.2-2ubuntu0~16.04.13+esm17",
"3.5.2-2ubuntu0~16.04.13+esm18",
"3.5.2-2ubuntu0~16.04.13+esm19",
"3.5.2-2ubuntu0~16.04.13+esm20",
"3.5.2-2ubuntu0~16.04.13+esm21",
"3.5.2-2ubuntu0~16.04.13+esm22",
"3.5.2-2ubuntu0~16.04.13+esm23",
"3.5.2-2ubuntu0~16.04.13+esm24"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "idle-python2.7",
"binary_version": "2.7.17-1~18.04ubuntu1.13+esm14"
},
{
"binary_name": "libpython2.7",
"binary_version": "2.7.17-1~18.04ubuntu1.13+esm14"
},
{
"binary_name": "libpython2.7-minimal",
"binary_version": "2.7.17-1~18.04ubuntu1.13+esm14"
},
{
"binary_name": "libpython2.7-stdlib",
"binary_version": "2.7.17-1~18.04ubuntu1.13+esm14"
},
{
"binary_name": "libpython2.7-testsuite",
"binary_version": "2.7.17-1~18.04ubuntu1.13+esm14"
},
{
"binary_name": "python2.7",
"binary_version": "2.7.17-1~18.04ubuntu1.13+esm14"
},
{
"binary_name": "python2.7-examples",
"binary_version": "2.7.17-1~18.04ubuntu1.13+esm14"
},
{
"binary_name": "python2.7-minimal",
"binary_version": "2.7.17-1~18.04ubuntu1.13+esm14"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "python2.7",
"purl": "pkg:deb/ubuntu/python2.7@2.7.17-1~18.04ubuntu1.13+esm14?arch=source\u0026distro=esm-infra/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2.7.14-2ubuntu2",
"2.7.14-4",
"2.7.14-6",
"2.7.14-7",
"2.7.14-8",
"2.7.15~rc1-1",
"2.7.15~rc1-1ubuntu0.1",
"2.7.15-4ubuntu4~18.04",
"2.7.15-4ubuntu4~18.04.1",
"2.7.15-4ubuntu4~18.04.2",
"2.7.17-1~18.04",
"2.7.17-1~18.04ubuntu1",
"2.7.17-1~18.04ubuntu1.1",
"2.7.17-1~18.04ubuntu1.2",
"2.7.17-1~18.04ubuntu1.3",
"2.7.17-1~18.04ubuntu1.5",
"2.7.17-1~18.04ubuntu1.6",
"2.7.17-1~18.04ubuntu1.7",
"2.7.17-1~18.04ubuntu1.8",
"2.7.17-1~18.04ubuntu1.10",
"2.7.17-1~18.04ubuntu1.11",
"2.7.17-1~18.04ubuntu1.13",
"2.7.17-1~18.04ubuntu1.13+esm1",
"2.7.17-1~18.04ubuntu1.13+esm2",
"2.7.17-1~18.04ubuntu1.13+esm3",
"2.7.17-1~18.04ubuntu1.13+esm4",
"2.7.17-1~18.04ubuntu1.13+esm5",
"2.7.17-1~18.04ubuntu1.13+esm6",
"2.7.17-1~18.04ubuntu1.13+esm7",
"2.7.17-1~18.04ubuntu1.13+esm8",
"2.7.17-1~18.04ubuntu1.13+esm10",
"2.7.17-1~18.04ubuntu1.13+esm11",
"2.7.17-1~18.04ubuntu1.13+esm12",
"2.7.17-1~18.04ubuntu1.13+esm13",
"2.7.17-1~18.04ubuntu1.13+esm14"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "idle-python3.6",
"binary_version": "3.6.9-1~18.04ubuntu1.13+esm9"
},
{
"binary_name": "libpython3.6",
"binary_version": "3.6.9-1~18.04ubuntu1.13+esm9"
},
{
"binary_name": "libpython3.6-minimal",
"binary_version": "3.6.9-1~18.04ubuntu1.13+esm9"
},
{
"binary_name": "libpython3.6-stdlib",
"binary_version": "3.6.9-1~18.04ubuntu1.13+esm9"
},
{
"binary_name": "libpython3.6-testsuite",
"binary_version": "3.6.9-1~18.04ubuntu1.13+esm9"
},
{
"binary_name": "python3.6",
"binary_version": "3.6.9-1~18.04ubuntu1.13+esm9"
},
{
"binary_name": "python3.6-examples",
"binary_version": "3.6.9-1~18.04ubuntu1.13+esm9"
},
{
"binary_name": "python3.6-minimal",
"binary_version": "3.6.9-1~18.04ubuntu1.13+esm9"
},
{
"binary_name": "python3.6-venv",
"binary_version": "3.6.9-1~18.04ubuntu1.13+esm9"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "python3.6",
"purl": "pkg:deb/ubuntu/python3.6@3.6.9-1~18.04ubuntu1.13+esm9?arch=source\u0026distro=esm-infra/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.6.3-1ubuntu1",
"3.6.4~rc1-1",
"3.6.4~rc1-2",
"3.6.4-1",
"3.6.4-2",
"3.6.4-3build1",
"3.6.4-4",
"3.6.5~rc1-1",
"3.6.5-3",
"3.6.6-1~18.04",
"3.6.7-1~18.04",
"3.6.8-1~18.04.1",
"3.6.8-1~18.04.2",
"3.6.8-1~18.04.3",
"3.6.9-1~18.04",
"3.6.9-1~18.04ubuntu1",
"3.6.9-1~18.04ubuntu1.1",
"3.6.9-1~18.04ubuntu1.3",
"3.6.9-1~18.04ubuntu1.4",
"3.6.9-1~18.04ubuntu1.6",
"3.6.9-1~18.04ubuntu1.7",
"3.6.9-1~18.04ubuntu1.8",
"3.6.9-1~18.04ubuntu1.9",
"3.6.9-1~18.04ubuntu1.10",
"3.6.9-1~18.04ubuntu1.12",
"3.6.9-1~18.04ubuntu1.13",
"3.6.9-1~18.04ubuntu1.13+esm1",
"3.6.9-1~18.04ubuntu1.13+esm2",
"3.6.9-1~18.04ubuntu1.13+esm3",
"3.6.9-1~18.04ubuntu1.13+esm4",
"3.6.9-1~18.04ubuntu1.13+esm5",
"3.6.9-1~18.04ubuntu1.13+esm6",
"3.6.9-1~18.04ubuntu1.13+esm7",
"3.6.9-1~18.04ubuntu1.13+esm8",
"3.6.9-1~18.04ubuntu1.13+esm9"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "idle-python3.7",
"binary_version": "3.7.5-2ubuntu1~18.04.2+esm10"
},
{
"binary_name": "libpython3.7",
"binary_version": "3.7.5-2ubuntu1~18.04.2+esm10"
},
{
"binary_name": "libpython3.7-minimal",
"binary_version": "3.7.5-2ubuntu1~18.04.2+esm10"
},
{
"binary_name": "libpython3.7-stdlib",
"binary_version": "3.7.5-2ubuntu1~18.04.2+esm10"
},
{
"binary_name": "libpython3.7-testsuite",
"binary_version": "3.7.5-2ubuntu1~18.04.2+esm10"
},
{
"binary_name": "python3.7",
"binary_version": "3.7.5-2ubuntu1~18.04.2+esm10"
},
{
"binary_name": "python3.7-examples",
"binary_version": "3.7.5-2ubuntu1~18.04.2+esm10"
},
{
"binary_name": "python3.7-minimal",
"binary_version": "3.7.5-2ubuntu1~18.04.2+esm10"
},
{
"binary_name": "python3.7-venv",
"binary_version": "3.7.5-2ubuntu1~18.04.2+esm10"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "python3.7",
"purl": "pkg:deb/ubuntu/python3.7@3.7.5-2ubuntu1~18.04.2+esm10?arch=source\u0026distro=esm-apps/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.7.0~a2-1",
"3.7.0~a3-1",
"3.7.0~a3-2",
"3.7.0~a3-3",
"3.7.0~a4-1",
"3.7.0~b1-1",
"3.7.0~b1-1build1",
"3.7.0~b2-1",
"3.7.0~b3-1",
"3.7.0-1~18.04",
"3.7.1-1~18.04",
"3.7.3-2~18.04.1",
"3.7.5-2~18.04",
"3.7.5-2~18.04.4",
"3.7.5-2ubuntu1~18.04.2",
"3.7.5-2ubuntu1~18.04.2+esm1",
"3.7.5-2ubuntu1~18.04.2+esm2",
"3.7.5-2ubuntu1~18.04.2+esm3",
"3.7.5-2ubuntu1~18.04.2+esm4",
"3.7.5-2ubuntu1~18.04.2+esm5",
"3.7.5-2ubuntu1~18.04.2+esm6",
"3.7.5-2ubuntu1~18.04.2+esm7",
"3.7.5-2ubuntu1~18.04.2+esm8",
"3.7.5-2ubuntu1~18.04.2+esm9",
"3.7.5-2ubuntu1~18.04.2+esm10"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "idle-python3.8",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm10"
},
{
"binary_name": "libpython3.8",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm10"
},
{
"binary_name": "libpython3.8-minimal",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm10"
},
{
"binary_name": "libpython3.8-stdlib",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm10"
},
{
"binary_name": "libpython3.8-testsuite",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm10"
},
{
"binary_name": "python3.8",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm10"
},
{
"binary_name": "python3.8-examples",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm10"
},
{
"binary_name": "python3.8-minimal",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm10"
},
{
"binary_name": "python3.8-venv",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm10"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "python3.8",
"purl": "pkg:deb/ubuntu/python3.8@3.8.0-3ubuntu1~18.04.2+esm10?arch=source\u0026distro=esm-apps/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.8.0-3~18.04",
"3.8.0-3~18.04.1",
"3.8.0-3ubuntu1~18.04.2",
"3.8.0-3ubuntu1~18.04.2+esm1",
"3.8.0-3ubuntu1~18.04.2+esm2",
"3.8.0-3ubuntu1~18.04.2+esm3",
"3.8.0-3ubuntu1~18.04.2+esm4",
"3.8.0-3ubuntu1~18.04.2+esm5",
"3.8.0-3ubuntu1~18.04.2+esm6",
"3.8.0-3ubuntu1~18.04.2+esm7",
"3.8.0-3ubuntu1~18.04.2+esm8",
"3.8.0-3ubuntu1~18.04.2+esm9",
"3.8.0-3ubuntu1~18.04.2+esm10"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "idle-python3.8",
"binary_version": "3.8.10-0ubuntu1~20.04.18+esm6"
},
{
"binary_name": "libpython3.8",
"binary_version": "3.8.10-0ubuntu1~20.04.18+esm6"
},
{
"binary_name": "libpython3.8-minimal",
"binary_version": "3.8.10-0ubuntu1~20.04.18+esm6"
},
{
"binary_name": "libpython3.8-stdlib",
"binary_version": "3.8.10-0ubuntu1~20.04.18+esm6"
},
{
"binary_name": "libpython3.8-testsuite",
"binary_version": "3.8.10-0ubuntu1~20.04.18+esm6"
},
{
"binary_name": "python3.8",
"binary_version": "3.8.10-0ubuntu1~20.04.18+esm6"
},
{
"binary_name": "python3.8-examples",
"binary_version": "3.8.10-0ubuntu1~20.04.18+esm6"
},
{
"binary_name": "python3.8-full",
"binary_version": "3.8.10-0ubuntu1~20.04.18+esm6"
},
{
"binary_name": "python3.8-minimal",
"binary_version": "3.8.10-0ubuntu1~20.04.18+esm6"
},
{
"binary_name": "python3.8-venv",
"binary_version": "3.8.10-0ubuntu1~20.04.18+esm6"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "python3.8",
"purl": "pkg:deb/ubuntu/python3.8@3.8.10-0ubuntu1~20.04.18+esm6?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.8.0-1",
"3.8.0-2",
"3.8.0-3",
"3.8.0-4",
"3.8.0-5",
"3.8.1-2ubuntu3",
"3.8.2~rc1-1ubuntu1",
"3.8.2-1",
"3.8.2-1ubuntu1",
"3.8.2-1ubuntu1.1",
"3.8.2-1ubuntu1.2",
"3.8.5-1~20.04",
"3.8.5-1~20.04.2",
"3.8.5-1~20.04.3",
"3.8.10-0ubuntu1~20.04",
"3.8.10-0ubuntu1~20.04.1",
"3.8.10-0ubuntu1~20.04.2",
"3.8.10-0ubuntu1~20.04.4",
"3.8.10-0ubuntu1~20.04.5",
"3.8.10-0ubuntu1~20.04.6",
"3.8.10-0ubuntu1~20.04.7",
"3.8.10-0ubuntu1~20.04.8",
"3.8.10-0ubuntu1~20.04.9",
"3.8.10-0ubuntu1~20.04.10",
"3.8.10-0ubuntu1~20.04.11",
"3.8.10-0ubuntu1~20.04.12",
"3.8.10-0ubuntu1~20.04.13",
"3.8.10-0ubuntu1~20.04.14",
"3.8.10-0ubuntu1~20.04.15",
"3.8.10-0ubuntu1~20.04.16",
"3.8.10-0ubuntu1~20.04.17",
"3.8.10-0ubuntu1~20.04.18",
"3.8.10-0ubuntu1~20.04.18+esm1",
"3.8.10-0ubuntu1~20.04.18+esm2",
"3.8.10-0ubuntu1~20.04.18+esm3",
"3.8.10-0ubuntu1~20.04.18+esm4",
"3.8.10-0ubuntu1~20.04.18+esm5",
"3.8.10-0ubuntu1~20.04.18+esm6"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "idle-python2.7",
"binary_version": "2.7.18-1~20.04.7+esm9"
},
{
"binary_name": "libpython2.7",
"binary_version": "2.7.18-1~20.04.7+esm9"
},
{
"binary_name": "libpython2.7-minimal",
"binary_version": "2.7.18-1~20.04.7+esm9"
},
{
"binary_name": "libpython2.7-stdlib",
"binary_version": "2.7.18-1~20.04.7+esm9"
},
{
"binary_name": "libpython2.7-testsuite",
"binary_version": "2.7.18-1~20.04.7+esm9"
},
{
"binary_name": "python2.7",
"binary_version": "2.7.18-1~20.04.7+esm9"
},
{
"binary_name": "python2.7-examples",
"binary_version": "2.7.18-1~20.04.7+esm9"
},
{
"binary_name": "python2.7-minimal",
"binary_version": "2.7.18-1~20.04.7+esm9"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "python2.7",
"purl": "pkg:deb/ubuntu/python2.7@2.7.18-1~20.04.7+esm9?arch=source\u0026distro=esm-apps/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2.7.17~rc1-1",
"2.7.17-1",
"2.7.17-1ubuntu5",
"2.7.17-1ubuntu6",
"2.7.18~rc1-2",
"2.7.18-1~20.04",
"2.7.18-1~20.04.1",
"2.7.18-1~20.04.1+esm1",
"2.7.18-1~20.04.3",
"2.7.18-1~20.04.3+esm1",
"2.7.18-1~20.04.4",
"2.7.18-1~20.04.4+esm1",
"2.7.18-1~20.04.4+esm2",
"2.7.18-1~20.04.4+esm3",
"2.7.18-1~20.04.5",
"2.7.18-1~20.04.5+esm1",
"2.7.18-1~20.04.5+esm2",
"2.7.18-1~20.04.6",
"2.7.18-1~20.04.6+esm1",
"2.7.18-1~20.04.7",
"2.7.18-1~20.04.7+esm3",
"2.7.18-1~20.04.7+esm4",
"2.7.18-1~20.04.7+esm6",
"2.7.18-1~20.04.7+esm7",
"2.7.18-1~20.04.7+esm8",
"2.7.18-1~20.04.7+esm9"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "idle-python3.9",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm10"
},
{
"binary_name": "libpython3.9",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm10"
},
{
"binary_name": "libpython3.9-minimal",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm10"
},
{
"binary_name": "libpython3.9-stdlib",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm10"
},
{
"binary_name": "libpython3.9-testsuite",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm10"
},
{
"binary_name": "python3.9",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm10"
},
{
"binary_name": "python3.9-examples",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm10"
},
{
"binary_name": "python3.9-full",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm10"
},
{
"binary_name": "python3.9-minimal",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm10"
},
{
"binary_name": "python3.9-venv",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm10"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "python3.9",
"purl": "pkg:deb/ubuntu/python3.9@3.9.5-3ubuntu0~20.04.1+esm10?arch=source\u0026distro=esm-apps/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.9.0~rc1-1~20.04",
"3.9.0-5~20.04",
"3.9.5-3~20.04.1",
"3.9.5-3ubuntu0~20.04.1",
"3.9.5-3ubuntu0~20.04.1+esm1",
"3.9.5-3ubuntu0~20.04.1+esm2",
"3.9.5-3ubuntu0~20.04.1+esm3",
"3.9.5-3ubuntu0~20.04.1+esm4",
"3.9.5-3ubuntu0~20.04.1+esm5",
"3.9.5-3ubuntu0~20.04.1+esm6",
"3.9.5-3ubuntu0~20.04.1+esm7",
"3.9.5-3ubuntu0~20.04.1+esm8",
"3.9.5-3ubuntu0~20.04.1+esm9",
"3.9.5-3ubuntu0~20.04.1+esm10"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "idle-python3.10",
"binary_version": "3.10.12-1~22.04.16"
},
{
"binary_name": "libpython3.10",
"binary_version": "3.10.12-1~22.04.16"
},
{
"binary_name": "libpython3.10-minimal",
"binary_version": "3.10.12-1~22.04.16"
},
{
"binary_name": "libpython3.10-stdlib",
"binary_version": "3.10.12-1~22.04.16"
},
{
"binary_name": "libpython3.10-testsuite",
"binary_version": "3.10.12-1~22.04.16"
},
{
"binary_name": "python3.10",
"binary_version": "3.10.12-1~22.04.16"
},
{
"binary_name": "python3.10-examples",
"binary_version": "3.10.12-1~22.04.16"
},
{
"binary_name": "python3.10-full",
"binary_version": "3.10.12-1~22.04.16"
},
{
"binary_name": "python3.10-minimal",
"binary_version": "3.10.12-1~22.04.16"
},
{
"binary_name": "python3.10-nopie",
"binary_version": "3.10.12-1~22.04.16"
},
{
"binary_name": "python3.10-venv",
"binary_version": "3.10.12-1~22.04.16"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "python3.10",
"purl": "pkg:deb/ubuntu/python3.10@3.10.12-1~22.04.16?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.10.0-2",
"3.10.0-3",
"3.10.0-4",
"3.10.0-5",
"3.10.0-5build1",
"3.10.1-1",
"3.10.1-2",
"3.10.2-1",
"3.10.2-5",
"3.10.2-7",
"3.10.3-1",
"3.10.4-3",
"3.10.4-3ubuntu0.1",
"3.10.6-1~22.04",
"3.10.6-1~22.04.1",
"3.10.6-1~22.04.2",
"3.10.6-1~22.04.2ubuntu1",
"3.10.6-1~22.04.2ubuntu1.1",
"3.10.12-1~22.04.2",
"3.10.12-1~22.04.3",
"3.10.12-1~22.04.4",
"3.10.12-1~22.04.5",
"3.10.12-1~22.04.6",
"3.10.12-1~22.04.7",
"3.10.12-1~22.04.8",
"3.10.12-1~22.04.9",
"3.10.12-1~22.04.10",
"3.10.12-1~22.04.11",
"3.10.12-1~22.04.12",
"3.10.12-1~22.04.13",
"3.10.12-1~22.04.14",
"3.10.12-1~22.04.15",
"3.10.12-1~22.04.16"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "idle-python2.7",
"binary_version": "2.7.18-13ubuntu1.5+esm8"
},
{
"binary_name": "libpython2.7",
"binary_version": "2.7.18-13ubuntu1.5+esm8"
},
{
"binary_name": "libpython2.7-minimal",
"binary_version": "2.7.18-13ubuntu1.5+esm8"
},
{
"binary_name": "libpython2.7-stdlib",
"binary_version": "2.7.18-13ubuntu1.5+esm8"
},
{
"binary_name": "libpython2.7-testsuite",
"binary_version": "2.7.18-13ubuntu1.5+esm8"
},
{
"binary_name": "python2.7",
"binary_version": "2.7.18-13ubuntu1.5+esm8"
},
{
"binary_name": "python2.7-examples",
"binary_version": "2.7.18-13ubuntu1.5+esm8"
},
{
"binary_name": "python2.7-minimal",
"binary_version": "2.7.18-13ubuntu1.5+esm8"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:22.04:LTS",
"name": "python2.7",
"purl": "pkg:deb/ubuntu/python2.7@2.7.18-13ubuntu1.5+esm8?arch=source\u0026distro=esm-apps/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2.7.18-8build1",
"2.7.18-13",
"2.7.18-13ubuntu1",
"2.7.18-13ubuntu1.1",
"2.7.18-13ubuntu1.1+esm2",
"2.7.18-13ubuntu1.2",
"2.7.18-13ubuntu1.2+esm1",
"2.7.18-13ubuntu1.2+esm2",
"2.7.18-13ubuntu1.2+esm3",
"2.7.18-13ubuntu1.3",
"2.7.18-13ubuntu1.3+esm1",
"2.7.18-13ubuntu1.4",
"2.7.18-13ubuntu1.4+esm1",
"2.7.18-13ubuntu1.5",
"2.7.18-13ubuntu1.5+esm2",
"2.7.18-13ubuntu1.5+esm3",
"2.7.18-13ubuntu1.5+esm5",
"2.7.18-13ubuntu1.5+esm6",
"2.7.18-13ubuntu1.5+esm7",
"2.7.18-13ubuntu1.5+esm8"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "idle-python3.11",
"binary_version": "3.11.0~rc1-1~22.04.1~esm9"
},
{
"binary_name": "libpython3.11",
"binary_version": "3.11.0~rc1-1~22.04.1~esm9"
},
{
"binary_name": "libpython3.11-minimal",
"binary_version": "3.11.0~rc1-1~22.04.1~esm9"
},
{
"binary_name": "libpython3.11-stdlib",
"binary_version": "3.11.0~rc1-1~22.04.1~esm9"
},
{
"binary_name": "libpython3.11-testsuite",
"binary_version": "3.11.0~rc1-1~22.04.1~esm9"
},
{
"binary_name": "python3.11",
"binary_version": "3.11.0~rc1-1~22.04.1~esm9"
},
{
"binary_name": "python3.11-examples",
"binary_version": "3.11.0~rc1-1~22.04.1~esm9"
},
{
"binary_name": "python3.11-full",
"binary_version": "3.11.0~rc1-1~22.04.1~esm9"
},
{
"binary_name": "python3.11-minimal",
"binary_version": "3.11.0~rc1-1~22.04.1~esm9"
},
{
"binary_name": "python3.11-nopie",
"binary_version": "3.11.0~rc1-1~22.04.1~esm9"
},
{
"binary_name": "python3.11-venv",
"binary_version": "3.11.0~rc1-1~22.04.1~esm9"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:22.04:LTS",
"name": "python3.11",
"purl": "pkg:deb/ubuntu/python3.11@3.11.0~rc1-1~22.04.1~esm9?arch=source\u0026distro=esm-apps/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.11.0~rc1-1~22.04",
"3.11.0~rc1-1~22.04.1~esm1",
"3.11.0~rc1-1~22.04.1~esm2",
"3.11.0~rc1-1~22.04.1~esm3",
"3.11.0~rc1-1~22.04.1~esm4",
"3.11.0~rc1-1~22.04.1~esm5",
"3.11.0~rc1-1~22.04.1~esm6",
"3.11.0~rc1-1~22.04.1~esm7",
"3.11.0~rc1-1~22.04.1~esm8",
"3.11.0~rc1-1~22.04.1~esm9"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "idle-python3.12",
"binary_version": "3.12.3-1ubuntu0.15"
},
{
"binary_name": "libpython3.12-minimal",
"binary_version": "3.12.3-1ubuntu0.15"
},
{
"binary_name": "libpython3.12-stdlib",
"binary_version": "3.12.3-1ubuntu0.15"
},
{
"binary_name": "libpython3.12-testsuite",
"binary_version": "3.12.3-1ubuntu0.15"
},
{
"binary_name": "libpython3.12t64",
"binary_version": "3.12.3-1ubuntu0.15"
},
{
"binary_name": "python3.12",
"binary_version": "3.12.3-1ubuntu0.15"
},
{
"binary_name": "python3.12-examples",
"binary_version": "3.12.3-1ubuntu0.15"
},
{
"binary_name": "python3.12-full",
"binary_version": "3.12.3-1ubuntu0.15"
},
{
"binary_name": "python3.12-minimal",
"binary_version": "3.12.3-1ubuntu0.15"
},
{
"binary_name": "python3.12-nopie",
"binary_version": "3.12.3-1ubuntu0.15"
},
{
"binary_name": "python3.12-venv",
"binary_version": "3.12.3-1ubuntu0.15"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "python3.12",
"purl": "pkg:deb/ubuntu/python3.12@3.12.3-1ubuntu0.15?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.12.0-1",
"3.12.0-5",
"3.12.0-6",
"3.12.0-7",
"3.12.1-2",
"3.12.2-1",
"3.12.2-4build3",
"3.12.2-4build4",
"3.12.2-5ubuntu3",
"3.12.3-1",
"3.12.3-1ubuntu0.1",
"3.12.3-1ubuntu0.2",
"3.12.3-1ubuntu0.3",
"3.12.3-1ubuntu0.4",
"3.12.3-1ubuntu0.5",
"3.12.3-1ubuntu0.6",
"3.12.3-1ubuntu0.7",
"3.12.3-1ubuntu0.8",
"3.12.3-1ubuntu0.9",
"3.12.3-1ubuntu0.10",
"3.12.3-1ubuntu0.11",
"3.12.3-1ubuntu0.12",
"3.12.3-1ubuntu0.13",
"3.12.3-1ubuntu0.15"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "idle-python3.13",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_name": "libpython3.13",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_name": "libpython3.13-minimal",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_name": "libpython3.13-stdlib",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_name": "libpython3.13-testsuite",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_name": "python3.13",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_name": "python3.13-examples",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_name": "python3.13-full",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_name": "python3.13-gdbm",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_name": "python3.13-minimal",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_name": "python3.13-nopie",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_name": "python3.13-tk",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_name": "python3.13-venv",
"binary_version": "3.13.7-1ubuntu0.4"
}
]
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "python3.13",
"purl": "pkg:deb/ubuntu/python3.13@3.13.7-1ubuntu0.4?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.13.3-1",
"3.13.3-2",
"3.13.3-4",
"3.13.4-1",
"3.13.5-1",
"3.13.5-2",
"3.13.6-1",
"3.13.7-1",
"3.13.7-1ubuntu0.1",
"3.13.7-1ubuntu0.2",
"3.13.7-1ubuntu0.3",
"3.13.7-1ubuntu0.4"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "idle-python3.14",
"binary_version": "3.14.0-1ubuntu0.3"
},
{
"binary_name": "libpython3.14",
"binary_version": "3.14.0-1ubuntu0.3"
},
{
"binary_name": "libpython3.14-minimal",
"binary_version": "3.14.0-1ubuntu0.3"
},
{
"binary_name": "libpython3.14-stdlib",
"binary_version": "3.14.0-1ubuntu0.3"
},
{
"binary_name": "libpython3.14-testsuite",
"binary_version": "3.14.0-1ubuntu0.3"
},
{
"binary_name": "python3.14",
"binary_version": "3.14.0-1ubuntu0.3"
},
{
"binary_name": "python3.14-examples",
"binary_version": "3.14.0-1ubuntu0.3"
},
{
"binary_name": "python3.14-full",
"binary_version": "3.14.0-1ubuntu0.3"
},
{
"binary_name": "python3.14-gdbm",
"binary_version": "3.14.0-1ubuntu0.3"
},
{
"binary_name": "python3.14-minimal",
"binary_version": "3.14.0-1ubuntu0.3"
},
{
"binary_name": "python3.14-nopie",
"binary_version": "3.14.0-1ubuntu0.3"
},
{
"binary_name": "python3.14-tk",
"binary_version": "3.14.0-1ubuntu0.3"
},
{
"binary_name": "python3.14-venv",
"binary_version": "3.14.0-1ubuntu0.3"
}
]
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "python3.14",
"purl": "pkg:deb/ubuntu/python3.14@3.14.0-1ubuntu0.3?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.14.0~a7-0ubuntu1",
"3.14.0~b1-1",
"3.14.0~b3-1",
"3.14.0~rc1-1",
"3.14.0~rc2-1",
"3.14.0~rc3-1",
"3.14.0-1",
"3.14.0-1ubuntu0.1",
"3.14.0-1ubuntu0.2",
"3.14.0-1ubuntu0.3"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "idle-python3.14",
"binary_version": "3.14.4-1ubuntu0.1"
},
{
"binary_name": "libpython3.14",
"binary_version": "3.14.4-1ubuntu0.1"
},
{
"binary_name": "libpython3.14-minimal",
"binary_version": "3.14.4-1ubuntu0.1"
},
{
"binary_name": "libpython3.14-stdlib",
"binary_version": "3.14.4-1ubuntu0.1"
},
{
"binary_name": "libpython3.14-testsuite",
"binary_version": "3.14.4-1ubuntu0.1"
},
{
"binary_name": "python3.14",
"binary_version": "3.14.4-1ubuntu0.1"
},
{
"binary_name": "python3.14-examples",
"binary_version": "3.14.4-1ubuntu0.1"
},
{
"binary_name": "python3.14-full",
"binary_version": "3.14.4-1ubuntu0.1"
},
{
"binary_name": "python3.14-gdbm",
"binary_version": "3.14.4-1ubuntu0.1"
},
{
"binary_name": "python3.14-minimal",
"binary_version": "3.14.4-1ubuntu0.1"
},
{
"binary_name": "python3.14-nopie",
"binary_version": "3.14.4-1ubuntu0.1"
},
{
"binary_name": "python3.14-tk",
"binary_version": "3.14.4-1ubuntu0.1"
},
{
"binary_name": "python3.14-venv",
"binary_version": "3.14.4-1ubuntu0.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "python3.14",
"purl": "pkg:deb/ubuntu/python3.14@3.14.4-1ubuntu0.1?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.14.0-1",
"3.14.0-2",
"3.14.0-4",
"3.14.2-1",
"3.14.3-1",
"3.14.3-2",
"3.14.3-3",
"3.14.3-5",
"3.14.4-1",
"3.14.4-1ubuntu0.1"
]
}
],
"aliases": [],
"details": "When using the \"tarfile\" module with a file opened in \"streaming mode\" (mode=\"r|\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.",
"id": "UBUNTU-CVE-2026-11972",
"modified": "2026-07-27T18:42:29Z",
"published": "2026-06-23T23:16:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-11972"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11972"
},
{
"type": "REPORT",
"url": "https://github.com/python/cpython/issues/151981"
},
{
"type": "REPORT",
"url": "https://github.com/python/cpython/pull/151982"
},
{
"type": "REPORT",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/"
}
],
"related": [],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"type": "CVSS_V4"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-11972"
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.