{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-0672: http.cookies: reject control characters in Morsel keys,\n values and parameters so they cannot inject extra header lines\n- CVE-2026-3644: http.cookies: reject control characters passed through\n Morsel.update(), |=, pickling and js_output()\n- CVE-2026-0864: configparser: normalize CR, CRLF and LF line endings in\n written values so a value cannot inject new sections or options\n- CVE-2026-4224: pyexpat: guard the recursion in conv_content_model() so a\n deeply nested DTD content model raises RecursionError instead of overflowing\n the C stack\n- CVE-2026-9669: bz2: refuse to reuse a BZ2Decompressor after a decompression\n error instead of resuming from an invalid internal state\n- CVE-2026-11972: tarfile: stop _Stream.seek() at end of data so a truncated\n stream raises ReadError instead of looping forever\n- CVE-2026-82049: tarfile: resolve the hard link target before linking so\n that, with the data filter, a hard link to a symlink cannot recreate the\n symlink outside the destination\n- CVE-2026-7210: seed the libexpat parser with 16 bytes of entropy via\n XML_SetHashSalt16Bytes (bound as a weak symbol; falls back to the legacy\n XML_SetHashSalt when unavailable), widening the hash salt from 8 to 16\n bytes; with PYTHONHASHSEED=0 the zero hash secret now also reaches libexpat", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791551454", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791551454" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/tuxcare9.8esu/advisories/2026/clsa-2026_1791551454.json" } ], "tracking": { "current_release_date": "2026-10-13T09:40:00Z", "generator": { "date": "2026-10-13T09:40:00Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1791551454", "initial_release_date": "2026-10-09T13:12:32Z", "revision_history": [ { "date": "2026-10-09T13:12:32Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-13T09:40:00Z", "number": "2", "summary": "Update document" } ], "status": "final", "version": "2" }, "title": "python3.9: Fix of 8 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.8", "product": { "name": "AlmaLinux 9.8", "product_id": "AlmaLinux-9.8", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Rocky Linux 9.8", "product": { "name": "Rocky Linux 9.8", "product_id": "Rocky Linux-9.8", "product_identification_helper": { "cpe": "cpe:2.3:o:resf:rocky_linux:9.8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Rocky Linux" } ], "category": "vendor", "name": "Rocky Linux" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product": { "name": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product_id": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-debug@3.9.25-7.el9_8.3.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product": { "name": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product_id": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3@3.9.25-7.el9_8.3.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product": { "name": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product_id": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-devel@3.9.25-7.el9_8.3.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product": { "name": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product_id": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-idle@3.9.25-7.el9_8.3.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product": { "name": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product_id": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-test@3.9.25-7.el9_8.3.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product": { "name": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product_id": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-libs@3.9.25-7.el9_8.3.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product": { "name": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product_id": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-tkinter@3.9.25-7.el9_8.3.tuxcare.els1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product": { "name": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product_id": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-debug@3.9.25-7.el9_8.3.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product": { "name": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product_id": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3@3.9.25-7.el9_8.3.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product": { "name": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product_id": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-devel@3.9.25-7.el9_8.3.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product": { "name": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product_id": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-idle@3.9.25-7.el9_8.3.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product": { "name": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product_id": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-test@3.9.25-7.el9_8.3.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product": { "name": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product_id": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-libs@3.9.25-7.el9_8.3.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product": { "name": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product_id": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-tkinter@3.9.25-7.el9_8.3.tuxcare.els1?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product": { "name": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product_id": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-debug@3.9.25-7.el9_8.3.tuxcare.els1?arch=aarch64" } } }, { "category": "product_version", "name": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product": { "name": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product_id": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3@3.9.25-7.el9_8.3.tuxcare.els1?arch=aarch64" } } }, { "category": "product_version", "name": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product": { "name": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product_id": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-devel@3.9.25-7.el9_8.3.tuxcare.els1?arch=aarch64" } } }, { "category": "product_version", "name": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product": { "name": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product_id": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-idle@3.9.25-7.el9_8.3.tuxcare.els1?arch=aarch64" } } }, { "category": "product_version", "name": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product": { "name": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product_id": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-test@3.9.25-7.el9_8.3.tuxcare.els1?arch=aarch64" } } }, { "category": "product_version", "name": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product": { "name": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product_id": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-libs@3.9.25-7.el9_8.3.tuxcare.els1?arch=aarch64" } } }, { "category": "product_version", "name": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product": { "name": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product_id": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-tkinter@3.9.25-7.el9_8.3.tuxcare.els1?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "product": { "name": "python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "product_id": "python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-unversioned-command@3.9.25-7.el9_8.3.tuxcare.els1?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" }, "product_reference": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686" }, "product_reference": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64" }, "product_reference": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686" }, "product_reference": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" }, "product_reference": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64" }, "product_reference": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" }, "product_reference": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686" }, "product_reference": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64" }, "product_reference": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64" }, "product_reference": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" }, "product_reference": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686" }, "product_reference": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" }, "product_reference": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686" }, "product_reference": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64" }, "product_reference": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686" }, "product_reference": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64" }, "product_reference": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" }, "product_reference": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686" }, "product_reference": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64" }, "product_reference": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" }, "product_reference": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch" }, "product_reference": "python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" }, "product_reference": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686" }, "product_reference": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64" }, "product_reference": "python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686" }, "product_reference": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" }, "product_reference": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64" }, "product_reference": "python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" }, "product_reference": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686" }, "product_reference": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64" }, "product_reference": "python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64" }, "product_reference": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" }, "product_reference": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686" }, "product_reference": "python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" }, "product_reference": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686" }, "product_reference": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64" }, "product_reference": "python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686" }, "product_reference": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64" }, "product_reference": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" }, "product_reference": "python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686" }, "product_reference": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64" }, "product_reference": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" }, "product_reference": "python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch" }, "product_reference": "python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "relates_to_product_reference": "Rocky Linux-9.8" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-0864", "cwe": { "id": "CWE-74", "name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')" }, "notes": [ { "category": "description", "text": "When using the \"configparser\" module to write configuration files\ncontaining multi-line text values with carriage return characters (\\r) the\nresulting file could be injected with unexpected keys and values if the\nattacker controls the written value.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-0864" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/0adb386f6e68eb2e73d32e19f235d012df009528", "url": "https://github.com/python/cpython/commit/0adb386f6e68eb2e73d32e19f235d012df009528" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/12dcbd74d3563016a8cb8c47e4898889f34f74dd", "url": "https://github.com/python/cpython/commit/12dcbd74d3563016a8cb8c47e4898889f34f74dd" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/274de100bbf4345bd0c23ef5b446722e9e636908", "url": "https://github.com/python/cpython/commit/274de100bbf4345bd0c23ef5b446722e9e636908" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/5858e42c539dac8394636a6e9b30472b8994851f", "url": "https://github.com/python/cpython/commit/5858e42c539dac8394636a6e9b30472b8994851f" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/71f2e02a52d47417a6fd69f456346cd8aa7aca98", "url": "https://github.com/python/cpython/commit/71f2e02a52d47417a6fd69f456346cd8aa7aca98" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/aaf850fd333cd89e9aada03d92aaa788a6cb1bb8", "url": "https://github.com/python/cpython/commit/aaf850fd333cd89e9aada03d92aaa788a6cb1bb8" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/db4a157c790479710a1a840d7937c5c815a6f8b6", "url": "https://github.com/python/cpython/commit/db4a157c790479710a1a840d7937c5c815a6f8b6" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/143927", "url": "https://github.com/python/cpython/issues/143927" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/151559", "url": "https://github.com/python/cpython/pull/151559" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/CV4NE6AFCRJL7XQOHX7J5TSDHUWVWGJS/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/CV4NE6AFCRJL7XQOHX7J5TSDHUWVWGJS/" } ], "release_date": "2026-06-23T18:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T13:10:55.785119Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791551454", "product_ids": [ "AlmaLinux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791551454" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-11972", "cwe": { "id": "CWE-252", "name": "Unchecked Return Value" }, "notes": [ { "category": "description", "text": "When using the \"tarfile\" module with a file opened in \"streaming mode\" (mode=\"r|\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-11972" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/3f031d431f80668e14f3bc066bbf4369cd9281b9", "url": "https://github.com/python/cpython/commit/3f031d431f80668e14f3bc066bbf4369cd9281b9" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/4ce6bf7c8aa7725828a38981c306f214c1f29365", "url": "https://github.com/python/cpython/commit/4ce6bf7c8aa7725828a38981c306f214c1f29365" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/7f0dc59c9a70f8f3b4da33d7c4a2ba552a7acc21", "url": "https://github.com/python/cpython/commit/7f0dc59c9a70f8f3b4da33d7c4a2ba552a7acc21" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/e86666c9dd256d52d0fbef6feb1ea4a51768fdec", "url": "https://github.com/python/cpython/commit/e86666c9dd256d52d0fbef6feb1ea4a51768fdec" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/eb63c0f94dfcbea7fda8eab6213818e134d67192", "url": "https://github.com/python/cpython/commit/eb63c0f94dfcbea7fda8eab6213818e134d67192" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/f50bf13566189c8d0ce5a814f33eff3d89951896", "url": "https://github.com/python/cpython/commit/f50bf13566189c8d0ce5a814f33eff3d89951896" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/f5e2776ff0383a902c12acf2b703e7e951fc8438", "url": "https://github.com/python/cpython/commit/f5e2776ff0383a902c12acf2b703e7e951fc8438" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/151981", "url": "https://github.com/python/cpython/issues/151981" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/151982", "url": "https://github.com/python/cpython/pull/151982" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/" } ], "release_date": "2026-06-23T23:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T13:10:55.785119Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791551454", "product_ids": [ "AlmaLinux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791551454" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-3644", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "description", "text": "The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-3644" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/3974092b037f9a3b000fb15b48ea61ce3b25d330", "url": "https://github.com/python/cpython/commit/3974092b037f9a3b000fb15b48ea61ce3b25d330" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/556aa098e738b127c714866f819b4abe2f7593d8", "url": "https://github.com/python/cpython/commit/556aa098e738b127c714866f819b4abe2f7593d8" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/57e88c1cf95e1481b94ae57abe1010469d47a6b4", "url": "https://github.com/python/cpython/commit/57e88c1cf95e1481b94ae57abe1010469d47a6b4" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/62ceb396fcbe69da1ded3702de586f4072b590dd", "url": "https://github.com/python/cpython/commit/62ceb396fcbe69da1ded3702de586f4072b590dd" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/d16ecc6c3626f0e2cc8f08c309c83934e8a979dd", "url": "https://github.com/python/cpython/commit/d16ecc6c3626f0e2cc8f08c309c83934e8a979dd" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/dae4b1a21f8df4570e30986affd61bbe4ade4cef", "url": "https://github.com/python/cpython/commit/dae4b1a21f8df4570e30986affd61bbe4ade4cef" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/145599", "url": "https://github.com/python/cpython/issues/145599" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/145600", "url": "https://github.com/python/cpython/pull/145600" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/" } ], "release_date": "2026-03-16T18:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T13:10:55.785119Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791551454", "product_ids": [ "AlmaLinux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791551454" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-9669", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-9669" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/157a5df8cb5d82b33f918a7489e72ce95ceb12b6", "url": "https://github.com/python/cpython/commit/157a5df8cb5d82b33f918a7489e72ce95ceb12b6" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/1ba6135eae75ad8413413caeeedb56ae72320636", "url": "https://github.com/python/cpython/commit/1ba6135eae75ad8413413caeeedb56ae72320636" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/5755d0f083949ff3c5bf3a37e673e24e306b036e", "url": "https://github.com/python/cpython/commit/5755d0f083949ff3c5bf3a37e673e24e306b036e" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/619a12b2e545391dc436b3af79dda22337382a6f", "url": "https://github.com/python/cpython/commit/619a12b2e545391dc436b3af79dda22337382a6f" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/938ec030e90c5e53f1faac6fab1643f14e4f4a79", "url": "https://github.com/python/cpython/commit/938ec030e90c5e53f1faac6fab1643f14e4f4a79" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/991e6cf86496718c4ef00b362d640e00cb5c85b2", "url": "https://github.com/python/cpython/commit/991e6cf86496718c4ef00b362d640e00cb5c85b2" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/d3ca26983dfbccdf609f24ff5877dc3118e4702d", "url": "https://github.com/python/cpython/commit/d3ca26983dfbccdf609f24ff5877dc3118e4702d" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/150599", "url": "https://github.com/python/cpython/issues/150599" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/150600", "url": "https://github.com/python/cpython/pull/150600" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/DBJZETMGUIFK7DVUWMOXHD3Z6IX2QPSX/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/DBJZETMGUIFK7DVUWMOXHD3Z6IX2QPSX/" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/06/08/17", "url": "http://www.openwall.com/lists/oss-security/2026/06/08/17" } ], "release_date": "2026-06-08T23:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T13:10:55.785119Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791551454", "product_ids": [ "AlmaLinux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791551454" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-4224", "cwe": { "id": "CWE-674", "name": "Uncontrolled Recursion" }, "notes": [ { "category": "description", "text": "When an Expat parser with a registered ElementDeclHandler parses an inline\ndocument type definition containing a deeply nested content model a C stack\noverflow occurs.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-4224" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/196edfb06a7458377d4d0f4b3cd41724c1f3bd4a", "url": "https://github.com/python/cpython/commit/196edfb06a7458377d4d0f4b3cd41724c1f3bd4a" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/24ce88b285f56ee11626cf5e472af3cd8cc7c621", "url": "https://github.com/python/cpython/commit/24ce88b285f56ee11626cf5e472af3cd8cc7c621" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/642865ddf4b232da1f3b1f7abcfa3254c4bfe785", "url": "https://github.com/python/cpython/commit/642865ddf4b232da1f3b1f7abcfa3254c4bfe785" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/af856a7177326ac25d9f66cc6dd28b554d914fee", "url": "https://github.com/python/cpython/commit/af856a7177326ac25d9f66cc6dd28b554d914fee" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/e0a8a6da90597a924b300debe045cdb4628ee1f3", "url": "https://github.com/python/cpython/commit/e0a8a6da90597a924b300debe045cdb4628ee1f3" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/eb0e8be3a7e11b87d198a2c3af1ed0eccf532768", "url": "https://github.com/python/cpython/commit/eb0e8be3a7e11b87d198a2c3af1ed0eccf532768" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/145986", "url": "https://github.com/python/cpython/issues/145986" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/145987", "url": "https://github.com/python/cpython/pull/145987" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/5M7CGUW3XBRY7II4DK43KF7NQQ3TPZ6R/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/5M7CGUW3XBRY7II4DK43KF7NQQ3TPZ6R/" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/03/16/4", "url": "http://www.openwall.com/lists/oss-security/2026/03/16/4" } ], "release_date": "2026-03-16T18:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T13:10:55.785119Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791551454", "product_ids": [ "AlmaLinux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791551454" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-0672", "cwe": { "id": "CWE-93", "name": "Improper Neutralization of CRLF Sequences ('CRLF Injection')" }, "notes": [ { "category": "description", "text": "When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-0672" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/62700107418eb2cca3fc88da036a243ea975f172", "url": "https://github.com/python/cpython/commit/62700107418eb2cca3fc88da036a243ea975f172" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/712452e6f1d4b9f7f8c4c92ebfcaac1705faa440", "url": "https://github.com/python/cpython/commit/712452e6f1d4b9f7f8c4c92ebfcaac1705faa440" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/7852d72b653fea0199acf5fc2a84f6f8b84eba8d", "url": "https://github.com/python/cpython/commit/7852d72b653fea0199acf5fc2a84f6f8b84eba8d" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/918387e4912d12ffc166c8f2a38df92b6ec756ca", "url": "https://github.com/python/cpython/commit/918387e4912d12ffc166c8f2a38df92b6ec756ca" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/95746b3a13a985787ef53b977129041971ed7f70", "url": "https://github.com/python/cpython/commit/95746b3a13a985787ef53b977129041971ed7f70" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/b1869ff648bbee0717221d09e6deff46617f3e85", "url": "https://github.com/python/cpython/commit/b1869ff648bbee0717221d09e6deff46617f3e85" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/143919", "url": "https://github.com/python/cpython/issues/143919" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/143920", "url": "https://github.com/python/cpython/pull/143920" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/6VFLQQEIX673KXKFUZXCUNE5AZOGZ45M/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/6VFLQQEIX673KXKFUZXCUNE5AZOGZ45M/" } ], "release_date": "2026-01-20T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T13:10:55.785119Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791551454", "product_ids": [ "AlmaLinux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791551454" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-7210", "cwe": { "id": "CWE-331", "name": "Insufficient Entropy" }, "notes": [ { "category": "description", "text": "`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-7210" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/24b8f12544468e4cedf5bfbe25442fcd495391e4", "url": "https://github.com/python/cpython/commit/24b8f12544468e4cedf5bfbe25442fcd495391e4" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/3573b3b1ecbd99030a0b18658e1bfece771b2566", "url": "https://github.com/python/cpython/commit/3573b3b1ecbd99030a0b18658e1bfece771b2566" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/cbaecf9f16da611a646d507c1cbca265c588fc56", "url": "https://github.com/python/cpython/commit/cbaecf9f16da611a646d507c1cbca265c588fc56" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/e37df2a6a71d6538698e2d3188a7c345b827640b", "url": "https://github.com/python/cpython/commit/e37df2a6a71d6538698e2d3188a7c345b827640b" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/ea70712d1a8508e14e9677d44f838dab04dc0286", "url": "https://github.com/python/cpython/commit/ea70712d1a8508e14e9677d44f838dab04dc0286" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/eeea765cb9d8f1fc3d8918b272ac3c477983f27a", "url": "https://github.com/python/cpython/commit/eeea765cb9d8f1fc3d8918b272ac3c477983f27a" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/fc9b11ff49cbc82e6f917d07a61517a2b5f3145f", "url": "https://github.com/python/cpython/commit/fc9b11ff49cbc82e6f917d07a61517a2b5f3145f" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/149018", "url": "https://github.com/python/cpython/issues/149018" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/149023", "url": "https://github.com/python/cpython/pull/149023" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/05/11/13", "url": "http://www.openwall.com/lists/oss-security/2026/05/11/13" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/05/11/8", "url": "http://www.openwall.com/lists/oss-security/2026/05/11/8" } ], "release_date": "2026-05-11T18:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T13:10:55.785119Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791551454", "product_ids": [ "AlmaLinux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791551454" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-82049", "cwe": { "id": "CWE-59", "name": "Improper Link Resolution Before File Access ('Link Following')" }, "notes": [ { "category": "description", "text": "In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose the contents of that file within the extracted tree.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-82049" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/197663d63afed27f66e10e23c194e8a634e60913", "url": "https://github.com/python/cpython/commit/197663d63afed27f66e10e23c194e8a634e60913" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/28f315486b3da0352b9a1de1c3c97f4127ba4771", "url": "https://github.com/python/cpython/commit/28f315486b3da0352b9a1de1c3c97f4127ba4771" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/5a57248b22ad3b9aafcaaadae2c304a1923daeca", "url": "https://github.com/python/cpython/commit/5a57248b22ad3b9aafcaaadae2c304a1923daeca" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/b38be2e6cf9d989075ab73412c63e003ebad4ff3", "url": "https://github.com/python/cpython/commit/b38be2e6cf9d989075ab73412c63e003ebad4ff3" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/b8f23e307097552eaea2604383a12ab280520d0d", "url": "https://github.com/python/cpython/commit/b8f23e307097552eaea2604383a12ab280520d0d" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/c66df4e70435d257fd488b35ea129c6f317433a8", "url": "https://github.com/python/cpython/commit/c66df4e70435d257fd488b35ea129c6f317433a8" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/cc1689830c6b9aaddded2fb9f2fe8116867e2c0e", "url": "https://github.com/python/cpython/commit/cc1689830c6b9aaddded2fb9f2fe8116867e2c0e" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/cccc7ec30212dba2abef53ce4a2bed112ddb690c", "url": "https://github.com/python/cpython/commit/cccc7ec30212dba2abef53ce4a2bed112ddb690c" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/157190", "url": "https://github.com/python/cpython/issues/157190" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/157191", "url": "https://github.com/python/cpython/pull/157191" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/EFJWGAZJA56AKSBR2WHMHQZO7RRLZPRH/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/EFJWGAZJA56AKSBR2WHMHQZO7RRLZPRH/" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/09/14/27", "url": "http://www.openwall.com/lists/oss-security/2026/09/14/27" } ], "release_date": "2026-09-14T19:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T13:10:55.785119Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791551454", "product_ids": [ "AlmaLinux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "AlmaLinux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python-unversioned-command-0:3.9.25-7.el9_8.3.tuxcare.els1.noarch", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-debug-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-devel-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-idle-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-libs-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-test-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.aarch64", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.i686", "Rocky Linux-9.8:python3-tkinter-0:3.9.25-7.el9_8.3.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791551454" } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }