https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:44:04.177876+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:2128 ALSA-2026:2128 — Moderate: python3 security update 2026-10-03T05:44:04.258398+00:00

Affected: AlmaLinux:8: platform-python, AlmaLinux:8: platform-python-debug, AlmaLinux:8: platform-python-devel, AlmaLinux:8: python3-idle, AlmaLinux:8: python3-libs, AlmaLinux:8: python3-test, AlmaLinux:8: python3-tkinter

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* cpython: wsgiref.headers.Headers allows header newline injection in Python (CVE-2026-0865) * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366) * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367) * cpython: email header injection due to unquoted newlines (CVE-2026-1299)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-05128 bdu:2026-05128 2026-10-03T05:44:04.258498+00:00 bdu:2026-05128 https://cve.radiocsirt.org/vuln/bell-cve-2025-15366 BELL-CVE-2025-15366 2026-10-03T05:44:04.258517+00:00

Affected: Alpaquita:23: python3, Alpaquita:25: python3, Alpaquita:stream: python3, BellSoft Hardened Containers:23: python3, BellSoft Hardened Containers:25: python3, BellSoft Hardened Containers:stream: python3

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0067 certfr-2026-avi-0067 — De multiples vulnérabilités ont été découvertes dans CPython. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-03T05:44:04.258545+00:00 certfr-2026-avi-0067 https://cve.radiocsirt.org/vuln/essa-2026:0053 ESSA-2026:0053 — Moderate: python security update 2026-10-03T05:44:04.258562+00:00

Moderate: python security update

 https://cve.radiocsirt.org/vuln/euvd-2026-348793 EUVD-2026-348793 2026-10-03T05:44:04.258583+00:00 EUVD-2026-348793 https://cve.radiocsirt.org/vuln/fkie_cve-2025-15366 fkie_cve-2025-15366 2026-10-03T05:44:04.258595+00:00

The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.

 https://cve.radiocsirt.org/vuln/ghsa-4c67-8q63-xrxq GHSA-4c67-8q63-xrxq 2026-10-03T05:44:04.258616+00:00

The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.

 https://cve.radiocsirt.org/vuln/rhsa-2026:16174 RHSA-2026:16174 — Red Hat Security Advisory: Red Hat AI Inference Server 3.3.3 (Spyre) 2026-10-03T05:44:04.258630+00:00

libxslt: Processing web content may disclose sensitive information libtiff: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial of service cpython: Excessive read buffering DoS in http.client gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification cpython: IMAP command injection in user-controlled commands cpython: POP3 command injection in user-controlled commands python: protobuf: Protobuf: Denial of Service due to recursion depth bypass cpython: email header injection due to unquoted newlines libvpx: Heap buffer overflow in libvpx openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing python: Python: Command-line option injection in webbrowser.open() via crafted URLs libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API giflib: Giflib: Double-free vulnerability leading to memory corruption…

 https://cve.radiocsirt.org/vuln/suse-su-2026:0590-1 SUSE-SU-2026:0590-1 — Security update for python 2026-10-03T05:44:04.258734+00:00

Security update for python

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-15366 UBUNTU-CVE-2025-15366 2026-10-03T05:44:04.258752+00:00

Affected: Ubuntu:Pro:14.04:LTS: python2.7, Ubuntu:Pro:14.04:LTS: python3.4, Ubuntu:Pro:14.04:LTS: python3.5, Ubuntu:Pro:16.04:LTS: python2.7, Ubuntu:Pro:16.04:LTS: python3.5, Ubuntu:Pro:18.04:LTS: python2.7, Ubuntu:Pro:18.04:LTS: python3.6, Ubuntu:Pro:18.04:LTS: python3.7, Ubuntu:Pro:18.04:LTS: python3.8, Ubuntu:Pro:20.04:LTS: python3.8 and 8 more

The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0209 WID-SEC-W-2026-0209 — Cpython: Mehrere Schwachstellen 2026-10-03T05:44:04.258794+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Cpython ausnutzen, um Dateien zu manipulieren oder beliebigen Code auszuführen.