https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:41:15 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-0864 <p><strong>Affected:</strong> Alpaquita:23: python3, Alpaquita:25: python3, Alpaquita:stream: python3, BellSoft Hardened Containers:23: python3, BellSoft Hardened Containers:25: python3, BellSoft Hardened Containers:stream: python3</p> <p><strong>Affected:</strong> Alpaquita:23: python3, Alpaquita:25: python3, Alpaquita:stream: python3, BellSoft Hardened Containers:23: python3, BellSoft Hardened Containers:25: python3, BellSoft Hardened Containers:stream: python3</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-0864 https://cve.radiocsirt.org/vuln/bit-libpython-2026-0864 <p><strong>Affected:</strong> Bitnami: libpython</p> <p>When using the &#34;configparser&#34; module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value.</p> <p><strong>Affected:</strong> Bitnami: libpython</p> <p>When using the &#34;configparser&#34; module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value.</p> https://cve.radiocsirt.org/vuln/bit-libpython-2026-0864 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0800 certfr-2026-avi-0800 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0800 https://cve.radiocsirt.org/vuln/euvd-2026-351837 EUVD-2026-351837 https://cve.radiocsirt.org/vuln/euvd-2026-351837 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0864 <p>When using the &#34;configparser&#34; module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value.</p> <p>When using the &#34;configparser&#34; module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-0864 https://cve.radiocsirt.org/vuln/ghsa-g345-7jg6-m22p <p>When using the &#34;configparser&#34; module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value.</p> <p>When using the &#34;configparser&#34; module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value.</p> https://cve.radiocsirt.org/vuln/ghsa-g345-7jg6-m22p https://cve.radiocsirt.org/vuln/msrc_cve-2026-0864 msrc_CVE-2026-0864 https://cve.radiocsirt.org/vuln/msrc_cve-2026-0864 https://cve.radiocsirt.org/vuln/oesa-2026-3068 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: python3</p> <p>Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces. Security Fix(es):</p> <p>When using the &amp;quot;configparser&amp;quot; module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value.(CVE-2026-0864)</p> <p>When using the &amp;quot;tarfile&amp;quot; module with a file opened in &amp;quot;streaming mode&amp;quot; (mode=&amp;quot;r|&amp;quot;) the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.(CVE-2026-11972)</p> <p>unicodedata.normalize() can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canonical Combining Class values. This affects all normalization forms.(CVE-2026-3276)</p> <p>The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host addresses with the actual peer address (getpeername()[0]),…</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: python3</p> <p>Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces. Security Fix(es):</p> <p>When using the &amp;quot;configparser&amp;quot; module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value.(CVE-2026-0864)</p> <p>When using the &amp;quot;tarfile&amp;quot; module with a file opened in &amp;quot;streaming mode&amp;quot; (mode=&amp;quot;r|&amp;quot;) the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.(CVE-2026-11972)</p> <p>unicodedata.normalize() can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canonical Combining Class values. This affects all normalization forms.(CVE-2026-3276)</p> <p>The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host addresses with the actual peer address (getpeername()[0]),…</p> https://cve.radiocsirt.org/vuln/oesa-2026-3068 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11426-1 <p>python310-3.10.20-8.1 on GA media</p> <p>python310-3.10.20-8.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11426-1 https://cve.radiocsirt.org/vuln/suse-su-2026:23159-1 <p>Security update for python313</p> <p>Security update for python313</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23159-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-0864 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python2.7, Ubuntu:Pro:14.04:LTS: python3.4, Ubuntu:Pro:14.04:LTS: python3.5, Ubuntu:Pro:16.04:LTS: python2.7, Ubuntu:Pro:16.04:LTS: python3.5, Ubuntu:Pro:18.04:LTS: python2.7, Ubuntu:Pro:18.04:LTS: python3.6, Ubuntu:Pro:18.04:LTS: python3.7, Ubuntu:Pro:18.04:LTS: python3.8, Ubuntu:Pro:20.04:LTS: python3.8 and 9 more</p> <p>When using the &#34;configparser&#34; module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python2.7, Ubuntu:Pro:14.04:LTS: python3.4, Ubuntu:Pro:14.04:LTS: python3.5, Ubuntu:Pro:16.04:LTS: python2.7, Ubuntu:Pro:16.04:LTS: python3.5, Ubuntu:Pro:18.04:LTS: python2.7, Ubuntu:Pro:18.04:LTS: python3.6, Ubuntu:Pro:18.04:LTS: python3.7, Ubuntu:Pro:18.04:LTS: python3.8, Ubuntu:Pro:20.04:LTS: python3.8 and 9 more</p> <p>When using the &#34;configparser&#34; module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and values if the attacker controls the written value.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-0864 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2044 <p>Ein Angreifer kann mehrere Schwachstellen in CPython ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in CPython ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2044