https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:10:45.487280+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:6494 ALSA-2023:6494 — Moderate: python3.11 security update 2026-10-02T14:10:45.692594+00:00

Affected: AlmaLinux:9: python3.11, AlmaLinux:9: python3.11-debug, AlmaLinux:9: python3.11-devel, AlmaLinux:9: python3.11-idle, AlmaLinux:9: python3.11-libs, AlmaLinux:9: python3.11-test, AlmaLinux:9: python3.11-tkinter

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python3.11 (3.11.5). (BZ#2210785)

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559) * python: file path truncation at \0 characters (CVE-2023-41105)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-09261 bdu:2024-09261 2026-10-02T14:10:45.692667+00:00 bdu:2024-09261 https://cve.radiocsirt.org/vuln/bell-cve-2023-41105 BELL-CVE-2023-41105 2026-10-02T14:10:45.692685+00:00

Affected: Alpaquita:23: python3, Alpaquita:stream: python3, BellSoft Hardened Containers:23: python3, BellSoft Hardened Containers:stream: python3

 https://cve.radiocsirt.org/vuln/bit-libpython-2023-41105 BIT-libpython-2023-41105 2026-10-02T14:10:45.692707+00:00

Affected: Bitnami: libpython

An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0044 certfr-2024-avi-0044 — De multiples vulnérabilités ont été découvertes dans Oracle MySQL. Certaines d'entre elles permettent à un attaquant de… 2026-10-02T14:10:45.692730+00:00 certfr-2024-avi-0044 https://cve.radiocsirt.org/vuln/euvd-2026-191874 EUVD-2026-191874 2026-10-02T14:10:45.692746+00:00 EUVD-2026-191874 https://cve.radiocsirt.org/vuln/fkie_cve-2023-41105 fkie_cve-2023-41105 2026-10-02T14:10:45.692756+00:00

An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.

 https://cve.radiocsirt.org/vuln/ghsa-65fx-pmw6-rcfm GHSA-65fx-pmw6-rcfm 2026-10-02T14:10:45.692778+00:00

An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.

 https://cve.radiocsirt.org/vuln/gsd-2023-41105 gsd-2023-41105 2026-10-02T14:10:45.692794+00:00 gsd-2023-41105 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13261-1 openSUSE-SU-2024:13261-1 — python311-3.11.5-2.1 on GA media 2026-10-02T14:10:45.692804+00:00

python311-3.11.5-2.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2023:3939-1 SUSE-SU-2023:3939-1 — Security update for python3 2026-10-02T14:10:45.692819+00:00

Security update for python3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-41105 UBUNTU-CVE-2023-41105 2026-10-02T14:10:45.692834+00:00

Affected: Ubuntu:Pro:22.04:LTS: python3.11

An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2256 WID-SEC-W-2023-2256 — Python: Schwachstelle ermöglicht nicht spezifizierten Angriff 2026-10-02T14:10:45.692853+00:00

Ein entfernter anonymer Angreifer kann eine Schwachstelle in Python ausnutzen, um einen nicht spezifizierten Angriff durchzuführen.