Most recent entries from all

ALSA-2026:10950 — Important: python3.12 security update

Affected: AlmaLinux:8: python3.12, AlmaLinux:8: python3.12-debug, AlmaLinux:8: python3.12-devel, AlmaLinux:8: python3.12-idle, AlmaLinux:8: python3.12-libs, AlmaLinux:8: python3.12-rpm-macros, AlmaLinux:8: python3.12-test, AlmaLinux:8: python3.12-tkinter

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375) * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075) * cpython: Out-of-memory when loading Plist (CVE-2025-13837) * cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282) * cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672) * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297) * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644) * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224) * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502) * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgment…

bdu:2026-09515

BELL-CVE-2026-1502

Affected: Alpaquita:23: python3, Alpaquita:25: python3, Alpaquita:stream: python3, BellSoft Hardened Containers:23: python3, BellSoft Hardened Containers:25: python3, BellSoft Hardened Containers:stream: python3

BIT-libpython-2026-1502 — HTTP client proxy tunnel headers not validated for CR/LF

Affected: Bitnami: libpython

CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.

certfr-2026-avi-0426 — De multiples vulnérabilités ont été découvertes dans Python. Elles permettent à un attaquant de provoquer un contournem…

certfr-2026-avi-0426

EUVD-2026-351833

fkie_cve-2026-1502

CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.

GHSA-hjxq-7w9q-2jw6

CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.

msrc_CVE-2026-1502 — HTTP client proxy tunnel headers not validated for CR/LF

msrc_CVE-2026-1502

OESA-2026-2115 — python3 security update

Affected: openEuler:24.03-LTS-SP1: python3

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces. Security Fix(es):

CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.(CVE-2026-1502)

Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the underlying shell. See CVE-2026-4519 for details.(CVE-2026-4786)

Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used. This scenario can be triggered if the process is under memory pressure. The fix cleans up the dangling pointer in this specific error condition.

The vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lz…

openSUSE-SU-2026:10647-1 — python310-3.10.20-6.1 on GA media

python310-3.10.20-6.1 on GA media

RHSA-2026:10117 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

python: Python: HTTP header injection via CR/LF in proxy tunnel headers python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules

RLSA-2026:19176 — Important: python3.14 security update

Affected: Rocky Linux:9: python3.14

Security Fix(es):

* cpython: wsgiref.headers.Headers allows header newline injection in Python (CVE-2026-0865)

* cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)

* cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)

* cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)

* python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)

* python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)

* python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)

* python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)

* python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process. (CVE-2026-5713)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

SUSE-SU-2026:1818-1 — Security update for python39

Security update for python39

UBUNTU-CVE-2026-1502

Affected: Ubuntu:Pro:14.04:LTS: python2.7, Ubuntu:Pro:14.04:LTS: python3.4, Ubuntu:Pro:14.04:LTS: python3.5, Ubuntu:Pro:16.04:LTS: python2.7, Ubuntu:Pro:16.04:LTS: python3.5, Ubuntu:16.04:LTS: jython, Ubuntu:Pro:18.04:LTS: python2.7, Ubuntu:Pro:18.04:LTS: python3.6, Ubuntu:18.04:LTS: jython, Ubuntu:Pro:18.04:LTS: python3.7 and 21 more

CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.

WID-SEC-W-2026-1064 — CPython: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in CPython ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Daten zu manipulieren.