https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:49:17 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:10978 <p><strong>Affected:</strong> AlmaLinux:9: python3.12, AlmaLinux:9: python3.12-debug, AlmaLinux:9: python3.12-devel, AlmaLinux:9: python3.12-idle, AlmaLinux:9: python3.12-libs, AlmaLinux:9: python3.12-test, AlmaLinux:9: python3.12-tkinter</p> <p>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.</p> <p>Security Fix(es):</p> <p>* python: Virtual environment (venv) activation scripts don&#39;t quote paths (CVE-2024-9287) * python: Unbounded memory buffering in SelectorSocketTransport.writelines() (CVE-2024-12254)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: python3.12, AlmaLinux:9: python3.12-debug, AlmaLinux:9: python3.12-devel, AlmaLinux:9: python3.12-idle, AlmaLinux:9: python3.12-libs, AlmaLinux:9: python3.12-test, AlmaLinux:9: python3.12-tkinter</p> <p>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.</p> <p>Security Fix(es):</p> <p>* python: Virtual environment (venv) activation scripts don&#39;t quote paths (CVE-2024-9287) * python: Unbounded memory buffering in SelectorSocketTransport.writelines() (CVE-2024-12254)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:10978 https://cve.radiocsirt.org/vuln/bdu:2025-00345 bdu:2025-00345 https://cve.radiocsirt.org/vuln/bdu:2025-00345 https://cve.radiocsirt.org/vuln/bell-cve-2024-12254 <p><strong>Affected:</strong> Alpaquita:stream: python3, BellSoft Hardened Containers:stream: python3</p> <p><strong>Affected:</strong> Alpaquita:stream: python3, BellSoft Hardened Containers:stream: python3</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-12254 https://cve.radiocsirt.org/vuln/bit-libpython-2024-12254 <p><strong>Affected:</strong> Bitnami: libpython</p> <p>Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not &#34;pause&#34; writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the &#34;high-water mark&#34;. Because of this, Protocols would not periodically drain the write buffer potentially leading to memory exhaustion.</p> <p>This vulnerability likely impacts a small number of users, you must be using Python 3.12.0 or later, on macOS or Linux, using the asyncio module with protocols, and using .writelines() method which had new zero-copy-on-write behavior in Python 3.12.0 and later. If not all of these factors are true then your usage of Python is unaffected.</p> <p><strong>Affected:</strong> Bitnami: libpython</p> <p>Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not &#34;pause&#34; writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the &#34;high-water mark&#34;. Because of this, Protocols would not periodically drain the write buffer potentially leading to memory exhaustion.</p> <p>This vulnerability likely impacts a small number of users, you must be using Python 3.12.0 or later, on macOS or Linux, using the asyncio module with protocols, and using .writelines() method which had new zero-copy-on-write behavior in Python 3.12.0 and later. If not all of these factors are true then your usage of Python is unaffected.</p> https://cve.radiocsirt.org/vuln/bit-libpython-2024-12254 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0641 certfr-2025-avi-0641 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0641 https://cve.radiocsirt.org/vuln/cleanstart-2026-ci66802 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: cassandra-fips</p> <p>Multiple security vulnerabilities affect the cassandra-fips package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: cassandra-fips</p> <p>Multiple security vulnerabilities affect the cassandra-fips package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ci66802 https://cve.radiocsirt.org/vuln/euvd-2026-343285 EUVD-2026-343285 https://cve.radiocsirt.org/vuln/euvd-2026-343285 https://cve.radiocsirt.org/vuln/fkie_cve-2024-12254 <p>Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not &#34;pause&#34; writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the &#34;high-water mark&#34;. Because of this, Protocols would not periodically drain the write buffer potentially leading to memory exhaustion.</p> <p>This vulnerability likely impacts a small number of users, you must be using Python 3.12.0 or later, on macOS or Linux, using the asyncio module with protocols, and using .writelines() method which had new zero-copy-on-write behavior in Python 3.12.0 and later. If not all of these factors are true then your usage of Python is unaffected.</p> <p>Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not &#34;pause&#34; writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the &#34;high-water mark&#34;. Because of this, Protocols would not periodically drain the write buffer potentially leading to memory exhaustion.</p> <p>This vulnerability likely impacts a small number of users, you must be using Python 3.12.0 or later, on macOS or Linux, using the asyncio module with protocols, and using .writelines() method which had new zero-copy-on-write behavior in Python 3.12.0 and later. If not all of these factors are true then your usage of Python is unaffected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-12254 https://cve.radiocsirt.org/vuln/ghsa-ph84-rcj2-fxxm <p>Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not &#34;pause&#34; writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the &#34;high-water mark&#34;. Because of this, Protocols would not periodically drain the write buffer potentially leading to memory exhaustion.</p> <p>This vulnerability likely impacts a small number of users, you must be using Python 3.12.0 or later, on macOS or Linux, using the asyncio module with protocols, and using .writelines() method which had new zero-copy-on-write behavior in Python 3.12.0 and later. If not all of these factors are true then your usage of Python is unaffected.</p> <p>Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not &#34;pause&#34; writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the &#34;high-water mark&#34;. Because of this, Protocols would not periodically drain the write buffer potentially leading to memory exhaustion.</p> <p>This vulnerability likely impacts a small number of users, you must be using Python 3.12.0 or later, on macOS or Linux, using the asyncio module with protocols, and using .writelines() method which had new zero-copy-on-write behavior in Python 3.12.0 and later. If not all of these factors are true then your usage of Python is unaffected.</p> https://cve.radiocsirt.org/vuln/ghsa-ph84-rcj2-fxxm https://cve.radiocsirt.org/vuln/msrc_cve-2024-12254 msrc_CVE-2024-12254 https://cve.radiocsirt.org/vuln/msrc_cve-2024-12254 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14581-1 <p>python312-3.12.8-1.1 on GA media</p> <p>python312-3.12.8-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14581-1 https://cve.radiocsirt.org/vuln/rhba-2025:6294 <p>python: cpython: tarfile: ReDos via excessive backtracking while parsing header values python: Virtual environment (venv) activation scripts don&#39;t quote paths python: Unbounded memory buffering in SelectorSocketTransport.writelines() python: cpython: URL parser allowed square brackets in domain names</p> <p>python: cpython: tarfile: ReDos via excessive backtracking while parsing header values python: Virtual environment (venv) activation scripts don&#39;t quote paths python: Unbounded memory buffering in SelectorSocketTransport.writelines() python: cpython: URL parser allowed square brackets in domain names</p> https://cve.radiocsirt.org/vuln/rhba-2025:6294 https://cve.radiocsirt.org/vuln/suse-su-2024:4291-1 <p>Security update for python312</p> <p>Security update for python312</p> https://cve.radiocsirt.org/vuln/suse-su-2024:4291-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-12254 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: python3.12</p> <p>Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not &#34;pause&#34; writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the &#34;high-water mark&#34;. Because of this, Protocols would not periodically drain the write buffer potentially leading to memory exhaustion. This vulnerability likely impacts a small number of users, you must be using Python 3.12.0 or later, on macOS or Linux, using the asyncio module with protocols, and using .writelines() method which had new zero-copy-on-write behavior in Python 3.12.0 and later. If not all of these factors are true then your usage of Python is unaffected.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: python3.12</p> <p>Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not &#34;pause&#34; writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the &#34;high-water mark&#34;. Because of this, Protocols would not periodically drain the write buffer potentially leading to memory exhaustion. This vulnerability likely impacts a small number of users, you must be using Python 3.12.0 or later, on macOS or Linux, using the asyncio module with protocols, and using .writelines() method which had new zero-copy-on-write behavior in Python 3.12.0 and later. If not all of these factors are true then your usage of Python is unaffected.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-12254 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3630 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Python ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Python ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3630