https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:28:04 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:6494 <p><strong>Affected:</strong> AlmaLinux:9: python3.11, AlmaLinux:9: python3.11-debug, AlmaLinux:9: python3.11-devel, AlmaLinux:9: python3.11-idle, AlmaLinux:9: python3.11-libs, AlmaLinux:9: python3.11-test, AlmaLinux:9: python3.11-tkinter</p> <p>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.</p> <p>The following packages have been upgraded to a later upstream version: python3.11 (3.11.5). (BZ#2210785)</p> <p>Security Fix(es):</p> <p>* python: tarfile module directory traversal (CVE-2007-4559) * python: file path truncation at \0 characters (CVE-2023-41105)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: python3.11, AlmaLinux:9: python3.11-debug, AlmaLinux:9: python3.11-devel, AlmaLinux:9: python3.11-idle, AlmaLinux:9: python3.11-libs, AlmaLinux:9: python3.11-test, AlmaLinux:9: python3.11-tkinter</p> <p>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.</p> <p>The following packages have been upgraded to a later upstream version: python3.11 (3.11.5). (BZ#2210785)</p> <p>Security Fix(es):</p> <p>* python: tarfile module directory traversal (CVE-2007-4559) * python: file path truncation at \0 characters (CVE-2023-41105)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:6494 https://cve.radiocsirt.org/vuln/bdu:2024-09261 bdu:2024-09261 https://cve.radiocsirt.org/vuln/bdu:2024-09261 https://cve.radiocsirt.org/vuln/bell-cve-2023-41105 <p><strong>Affected:</strong> Alpaquita:23: python3, Alpaquita:stream: python3, BellSoft Hardened Containers:23: python3, BellSoft Hardened Containers:stream: python3</p> <p><strong>Affected:</strong> Alpaquita:23: python3, Alpaquita:stream: python3, BellSoft Hardened Containers:23: python3, BellSoft Hardened Containers:stream: python3</p> https://cve.radiocsirt.org/vuln/bell-cve-2023-41105 https://cve.radiocsirt.org/vuln/bit-libpython-2023-41105 <p><strong>Affected:</strong> Bitnami: libpython</p> <p>An issue was discovered in Python 3.11 through 3.11.4. If a path containing &#39;\0&#39; bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first &#39;\0&#39; byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.</p> <p><strong>Affected:</strong> Bitnami: libpython</p> <p>An issue was discovered in Python 3.11 through 3.11.4. If a path containing &#39;\0&#39; bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first &#39;\0&#39; byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.</p> https://cve.radiocsirt.org/vuln/bit-libpython-2023-41105 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0044 certfr-2024-avi-0044 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0044 https://cve.radiocsirt.org/vuln/euvd-2026-191874 EUVD-2026-191874 https://cve.radiocsirt.org/vuln/euvd-2026-191874 https://cve.radiocsirt.org/vuln/fkie_cve-2023-41105 <p>An issue was discovered in Python 3.11 through 3.11.4. If a path containing &#39;\0&#39; bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first &#39;\0&#39; byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.</p> <p>An issue was discovered in Python 3.11 through 3.11.4. If a path containing &#39;\0&#39; bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first &#39;\0&#39; byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-41105 https://cve.radiocsirt.org/vuln/ghsa-65fx-pmw6-rcfm <p>An issue was discovered in Python 3.11 through 3.11.4. If a path containing &#39;\0&#39; bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first &#39;\0&#39; byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.</p> <p>An issue was discovered in Python 3.11 through 3.11.4. If a path containing &#39;\0&#39; bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first &#39;\0&#39; byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.</p> https://cve.radiocsirt.org/vuln/ghsa-65fx-pmw6-rcfm https://cve.radiocsirt.org/vuln/gsd-2023-41105 gsd-2023-41105 https://cve.radiocsirt.org/vuln/gsd-2023-41105 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13261-1 <p>python311-3.11.5-2.1 on GA media</p> <p>python311-3.11.5-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13261-1 https://cve.radiocsirt.org/vuln/suse-su-2023:3939-1 <p>Security update for python3</p> <p>Security update for python3</p> https://cve.radiocsirt.org/vuln/suse-su-2023:3939-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-41105 <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: python3.11</p> <p>An issue was discovered in Python 3.11 through 3.11.4. If a path containing &#39;\0&#39; bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first &#39;\0&#39; byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.</p> <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: python3.11</p> <p>An issue was discovered in Python 3.11 through 3.11.4. If a path containing &#39;\0&#39; bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first &#39;\0&#39; byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-41105 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2256 <p>Ein entfernter anonymer Angreifer kann eine Schwachstelle in Python ausnutzen, um einen nicht spezifizierten Angriff durchzuführen.</p> <p>Ein entfernter anonymer Angreifer kann eine Schwachstelle in Python ausnutzen, um einen nicht spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2256