Every CVE Search/ Get API key

CVE-2025-8291

ZIP64 End of Central Directory (EOCD) Locator record offset not checked

4.3 MediumFix available

The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the 'zipfile' module compared to other ZIP implementations.

Remediation maintains this behavior, but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

0.47%Up 0.4 points since Oct 8, 2025
90%50%10%1%

What each source reports

CVE List Score used 4.3

ZIP64 End of Central Directory (EOCD) Locator record offset not checked

The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the 'zipfile' module compared to other ZIP implementations.

Remediation maintains this behavior, but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.

Record
CVE-2025-8291
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weakness
CWE-1285
Updated
2026-11-02
EUVDEUVD-2025-31917 4.3

The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the 'zipfile' module compared to other ZIP implementations.

Remediation maintains this behavior, but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.

Record
EUVD-2025-31917
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-49g5-f6qw-8mm7 4.3

The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD)...

The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the 'zipfile' module compared to other ZIP implementations.

Remediation maintains this behavior, but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.

Record
GHSA-49g5-f6qw-8mm7
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weakness
CWE-1285
Updated
2026-11-02
NVD 4.3

The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the 'zipfile' module compared to other ZIP implementations.

Remediation maintains this behavior, but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.

Record
CVE-2025-8291
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weakness
CWE-1285
Updated
2026-11-02
OSV 4.3

ZIP64 End of Central Directory (EOCD) Locator record offset not checked

The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the 'zipfile' module compared to other ZIP implementations.

Remediation maintains this behavior, but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.

Record
CVE-2025-8291
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-04
OSVDEBIAN-CVE-2025-8291 4.3

The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the 'zipfile' module compared to other ZIP implementations. Remediation maintains this behavior, but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.

Record
DEBIAN-CVE-2025-8291
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
Show 46 moreShow less
OSVOESA-2025-2574 6.3

python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.

Security Fix(es):

A vulnerability has been found in the CPython venv module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment activation scripts (ie source venv/bin/activate ). This means that attacker-controlled virtual environments are able to run commands when the virtual environment is activated. Virtual environments which are not created by an attacker or which aren t activated before being used (ie ./venv/bin/python ) are not affected.(CVE-2024-9287)

The zipfile module in CPython would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value. This offset value was not used to locate the ZIP64 EOCD record; instead, the ZIP64 EOCD record was assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the zipfile module compared to other ZIP implementations. Remediation maintains this behavior but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.(CVE-2025-8291)

Record
OESA-2025-2574
CVSS 3.1
6.3 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N
Updated
2026-11-02
OSVOESA-2025-2575 4.3

python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.

Security Fix(es):

The zipfile module in CPython would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value. This offset value was not used to locate the ZIP64 EOCD record; instead, the ZIP64 EOCD record was assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the zipfile module compared to other ZIP implementations. Remediation maintains this behavior but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.(CVE-2025-8291)

Record
OESA-2025-2575
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVOESA-2025-2576 4.3

python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.

Security Fix(es):

The zipfile module in CPython would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value. This offset value was not used to locate the ZIP64 EOCD record; instead, the ZIP64 EOCD record was assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the zipfile module compared to other ZIP implementations. Remediation maintains this behavior but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.(CVE-2025-8291)

Record
OESA-2025-2576
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVOESA-2025-2577 4.3

python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.

Security Fix(es):

The zipfile module in CPython would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value. This offset value was not used to locate the ZIP64 EOCD record; instead, the ZIP64 EOCD record was assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the zipfile module compared to other ZIP implementations. Remediation maintains this behavior but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.(CVE-2025-8291)

Record
OESA-2025-2577
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVOESA-2025-2578 4.3

python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.

Security Fix(es):

The zipfile module in CPython would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value. This offset value was not used to locate the ZIP64 EOCD record; instead, the ZIP64 EOCD record was assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the zipfile module compared to other ZIP implementations. Remediation maintains this behavior but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.(CVE-2025-8291)

Record
OESA-2025-2578
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVOESA-2025-2706 4.3

python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.

Security Fix(es):

The zipfile module in CPython would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value. This offset value was not used to locate the ZIP64 EOCD record; instead, the ZIP64 EOCD record was assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the zipfile module compared to other ZIP implementations. Remediation maintains this behavior but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.(CVE-2025-8291)

Record
OESA-2025-2706
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:23323 4.3

Red Hat Security Advisory: python3.12 security update

Record
RHSA-2025:23323
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:23342 4.3

Red Hat Security Advisory: python3.9 security update

Record
RHSA-2025:23342
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:23530 7.6

Red Hat Security Advisory: python39:3.9 security update

Record
RHSA-2025:23530
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2025:23940 4.3

Red Hat Security Advisory: python3.12 security update

Record
RHSA-2025:23940
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRHSA-2026:0123 7.5

Red Hat Security Advisory: python3.12 security update

Record
RHSA-2026:0123
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:0353 4.3

Red Hat Security Advisory: python3.12 security update

Record
RHSA-2026:0353
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRHSA-2026:0354 4.3

Red Hat Security Advisory: python3.12 security update

Record
RHSA-2026:0354
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRHSA-2026:0355 4.3

Red Hat Security Advisory: python3.12 security update

Record
RHSA-2026:0355
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRHSA-2026:7443 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:7443
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:7661 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:7661
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:8822 8.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:8822
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:8824 8.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:8824
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:23323 4.3

Moderate: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:23323
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRLSA-2025:23342 4.3

Moderate: python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used (CVE-2024-5642)

  • cpython: Python HTMLParser quadratic complexity (CVE-2025-6069)

  • cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)

  • python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:23342
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRLSA-2025:23530 7.6

Important: python39:3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used (CVE-2024-5642)

  • python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)

  • python: Improper validation of IPv6 and IPvFuture addresses (CVE-2024-11168)

  • python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938)

  • cpython: python: CPython DecodeError Handling Vulnerability (CVE-2025-4516)

  • cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)

  • cpython: python: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)

  • python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)

  • cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)

  • cpython: Python HTMLParser quadratic complexity (CVE-2025-6069)

  • cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)

  • python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:23530
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L
Updated
2026-11-02
OSVRLSA-2025:23940 4.3

Moderate: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:23940
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRLSA-2026:0123 7.5

Moderate: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)

  • cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:0123
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-8291 4.3

The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the 'zipfile' module compared to other ZIP implementations. Remediation maintains this behavior, but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.

Record
UBUNTU-CVE-2025-8291
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVALSA-2025:23323 No score

Moderate: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:23323
Updated
2026-11-02
OSVALSA-2025:23342 No score

Moderate: python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used (CVE-2024-5642)
  • cpython: Python HTMLParser quadratic complexity (CVE-2025-6069)
  • cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)
  • python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:23342
Updated
2026-11-02
OSVALSA-2025:23530 No score

Important: python39:3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used (CVE-2024-5642)
  • python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)
  • python: Improper validation of IPv6 and IPvFuture addresses (CVE-2024-11168)
  • python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938)
  • cpython: python: CPython DecodeError Handling Vulnerability (CVE-2025-4516)
  • cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
  • cpython: python: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
  • python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
  • cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)
  • cpython: Python HTMLParser quadratic complexity (CVE-2025-6069)
  • cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)
  • python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:23530
Updated
2026-11-02
OSVALSA-2025:23940 No score

Moderate: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:23940
Updated
2026-11-02
OSVALSA-2026:0123 No score

Moderate: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)
  • cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:0123
Updated
2026-11-02
OSVAZL-110507 No score

CVE-2025-8291 affecting package python-py 1.11.0-1

The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the 'zipfile' module compared to other ZIP implementations.

Remediation maintains this behavior, but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.

Record
AZL-110507
Updated
2026-11-02
OSVAZL-68318 No score

CVE-2025-8291 affecting package python3 for versions less than 3.12.9-5

The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the 'zipfile' module compared to other ZIP implementations.

Remediation maintains this behavior, but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.

Record
AZL-68318
Updated
2026-11-02
OSVAZL-68321 No score

CVE-2025-8291 affecting package python3 for versions less than 3.9.19-16

The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the 'zipfile' module compared to other ZIP implementations.

Remediation maintains this behavior, but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.

Record
AZL-68321
Updated
2026-11-02
OSVBIT-libpython-2025-8291 No score

ZIP64 End of Central Directory (EOCD) Locator record offset not checked

The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the 'zipfile' module compared to other ZIP implementations.

Remediation maintains this behavior, but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.

Record
BIT-libpython-2025-8291
Updated
2026-11-02
OSVBIT-python-2025-8291 No score

ZIP64 End of Central Directory (EOCD) Locator record offset not checked

The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the 'zipfile' module compared to other ZIP implementations.

Remediation maintains this behavior, but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.

Record
BIT-python-2025-8291
Updated
2026-11-02
OSVBIT-python-min-2025-8291 No score

ZIP64 End of Central Directory (EOCD) Locator record offset not checked

The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the 'zipfile' module compared to other ZIP implementations.

Remediation maintains this behavior, but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.

Record
BIT-python-min-2025-8291
Updated
2026-11-02
OSVCLSA-2026-1776330599 No score

python3.9: Fix of 11 CVEs

  • CVE-2025-8291: fix zipfile ZIP64 EOCD Locator offset validation
  • CVE-2025-6069: fix quadratic complexity in HTMLParser
  • CVE-2025-4516: fix use-after-free in unicode-escape decoder with error handler
  • CVE-2026-2297: ensure SourcelessFileLoader uses io.open_code
  • CVE-2026-3479: reject invalid resource arguments in pkgutil.get_data()
  • CVE-2025-1795: fix email header list separator incorrectly encoded during folding
  • CVE-2026-0672: reject control characters in http cookies
  • CVE-2025-15282: reject control characters in data URL mediatypes
  • CVE-2026-3644: reject control characters in http.cookies.Morsel.update(), |=, unpickling, and js_output()
  • CVE-2026-4224: avoid unbound C recursion in conv_content_model in pyexpat.c
  • CVE-2025-11468: preserve parens when folding email comments to prevent header injection
Record
CLSA-2026-1776330599
Updated
2026-11-02
OSVCLSA-2026-1778129970 No score

python3.11: Fix of 7 CVEs

  • CVE-2026-0672: reject control characters in http.cookies cookie names, values, and parameters to prevent header injection
  • CVE-2026-3644: reject control characters in Morsel.update(), |= operator, and unpickling paths missed by CVE-2026-0672; add output validation to BaseCookie.js_output()
  • CVE-2026-2297: ensure SourcelessFileLoader uses io.open_code so sys.audit handlers fire for legacy .pyc imports
  • CVE-2025-8291: validate ZIP64 End of Central Directory locator offset to prevent ZIP archive parser confusion
  • CVE-2025-6069: fix quadratic complexity in html.parser.HTMLParser when processing crafted malformed inputs
  • CVE-2025-4516: fix use-after-free in unicode-escape decoder when an error handler is invoked
  • CVE-2025-1795: stop incorrectly RFC 2047 encoding the comma separator when an address list is folded
Record
CLSA-2026-1778129970
Updated
2026-11-02
OSVCLSA-2026-1778233301 No score

python3.9: Fix of 7 CVEs

  • CVE-2025-1795: fix incorrect parsing of email addresses with special chars
  • CVE-2025-4516: fix use-after-free in unicode-escape decoder with non-strict error handler
  • CVE-2025-6069: fix quadratic complexity in HTMLParser special input
  • CVE-2025-8291: fix zip64 end-of-central-directory record validation
  • CVE-2025-11468: fix incorrect parsing of empty email display names
  • CVE-2025-15282: fix control character injection in data: URL mediatype in urllib.request.DataHandler
  • CVE-2024-5642: fix buffer over-read in ssl.SSLContext.set_npn_protocols with empty list
Record
CLSA-2026-1778233301
Updated
2026-11-02
OSVCLSA-2026-1779213441 No score

python3.11: Fix of 11 CVEs

  • CVE-2026-4224: avoid unbound C recursion in conv_content_model in pyexpat
  • CVE-2026-3644: reject control characters in http.cookies.Morsel.update()
  • CVE-2026-0672: reject control characters in http.cookies.Morsel
  • CVE-2025-8291: check consistency of zip64 end of central directory record
  • CVE-2025-6069: fix quadratic complexity in processing special input in HTMLParser
  • CVE-2025-4516: fix use-after-free in the unicode-escape decoder with error handler
  • CVE-2025-15282: reject control characters in data URL mediatypes
  • CVE-2025-11468: preserve parenthesis when folding email comments
  • CVE-2026-3479: reject invalid resource arguments in pkgutil.get_data()
  • CVE-2026-2297: ensure SourcelessFileLoader uses io.open_code
  • CVE-2024-5642: disallow setting an empty list for ssl NPN protocols
Record
CLSA-2026-1779213441
Updated
2026-11-02
OSVopenSUSE-SU-2025:15713-1 No score

python315-3.15.0~a1-1.1 on GA media

These are all security issues fixed in the python315-3.15.0~a1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15713-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15742-1 No score

python312-3.12.12-2.1 on GA media

These are all security issues fixed in the python312-3.12.12-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15742-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15748-1 No score

python314-3.14.0-3.1 on GA media

These are all security issues fixed in the python314-3.14.0-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15748-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15750-1 No score

python313-3.13.9-2.1 on GA media

These are all security issues fixed in the python313-3.13.9-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15750-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15760-1 No score

python311-3.11.14-2.1 on GA media

These are all security issues fixed in the python311-3.11.14-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15760-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15768-1 No score

python310-3.10.19-2.1 on GA media

These are all security issues fixed in the python310-3.10.19-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15768-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15792-1 No score

python39-3.9.24-2.1 on GA media

These are all security issues fixed in the python39-3.9.24-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15792-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
python3.12
AlmaLinux:9
 before 3.12.12-1.el9_7
3.12.12-1.el9_7
python3.12-debug
AlmaLinux:9
 before 3.12.12-1.el9_7
3.12.12-1.el9_7
python3.12-devel
AlmaLinux:9
 before 3.12.12-1.el9_7
3.12.12-1.el9_7
python3.12-idle
AlmaLinux:9
 before 3.12.12-1.el9_7
3.12.12-1.el9_7
python3.12-libs
AlmaLinux:9
 before 3.12.12-1.el9_7
3.12.12-1.el9_7
python3.12-test
AlmaLinux:9
 before 3.12.12-1.el9_7
3.12.12-1.el9_7
python3.12-tkinter
AlmaLinux:9
 before 3.12.12-1.el9_7
3.12.12-1.el9_7
python-unversioned-command
AlmaLinux:9
From an advisory covering 4 CVEs
 before 3.9.25-2.el9_7
3.9.25-2.el9_7
python3
AlmaLinux:9
From an advisory covering 4 CVEs
 before 3.9.25-2.el9_7
3.9.25-2.el9_7
python3-debug
AlmaLinux:9
From an advisory covering 4 CVEs
 before 3.9.25-2.el9_7
3.9.25-2.el9_7
Show 290 moreShow less
Affected packages
PackageAffectedFixed
python3-devel
AlmaLinux:9
From an advisory covering 4 CVEs
 before 3.9.25-2.el9_7
3.9.25-2.el9_7
python3-idle
AlmaLinux:9
From an advisory covering 4 CVEs
 before 3.9.25-2.el9_7
3.9.25-2.el9_7
python3-libs
AlmaLinux:9
From an advisory covering 4 CVEs
 before 3.9.25-2.el9_7
3.9.25-2.el9_7
python3-test
AlmaLinux:9
From an advisory covering 4 CVEs
 before 3.9.25-2.el9_7
3.9.25-2.el9_7
python3-tkinter
AlmaLinux:9
From an advisory covering 4 CVEs
 before 3.9.25-2.el9_7
3.9.25-2.el9_7
python39
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.9.25-2.module_el8.10.0+4083+53cad1fb
3.9.25-2.module_el8.10.0+4083+53cad1fb
python39-Cython
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.29.21-5.module_el8.6.0+2780+a40f65e1
0.29.21-5.module_el8.6.0+2780+a40f65e1
python39-Cython
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.29.21-5.module_el8.6.0+3248+c431e88c
0.29.21-5.module_el8.6.0+3248+c431e88c
python39-PyMySQL
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.10.1-2.module_el8.6.0+2780+a40f65e1
0.10.1-2.module_el8.6.0+2780+a40f65e1
python39-attrs
AlmaLinux:8
From an advisory covering 12 CVEs
 before 20.3.0-2.module_el8.6.0+2780+a40f65e1
20.3.0-2.module_el8.6.0+2780+a40f65e1
python39-cffi
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.14.3-2.module_el8.6.0+2780+a40f65e1
1.14.3-2.module_el8.6.0+2780+a40f65e1
python39-cffi
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.14.3-2.module_el8.6.0+3248+c431e88c
1.14.3-2.module_el8.6.0+3248+c431e88c
python39-chardet
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.0.4-19.module_el8.6.0+2780+a40f65e1
3.0.4-19.module_el8.6.0+2780+a40f65e1
python39-cryptography
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.3.1-3.module_el8.10.0+3765+2f9a457d
3.3.1-3.module_el8.10.0+3765+2f9a457d
python39-debug
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.9.25-2.module_el8.10.0+4083+53cad1fb
3.9.25-2.module_el8.10.0+4083+53cad1fb
python39-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.9.25-2.module_el8.10.0+4083+53cad1fb
3.9.25-2.module_el8.10.0+4083+53cad1fb
python39-idle
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.9.25-2.module_el8.10.0+4083+53cad1fb
3.9.25-2.module_el8.10.0+4083+53cad1fb
python39-idna
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.10-4.module_el8.10.0+3849+a48d89aa
2.10-4.module_el8.10.0+3849+a48d89aa
python39-iniconfig
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.1.1-2.module_el8.6.0+2780+a40f65e1
1.1.1-2.module_el8.6.0+2780+a40f65e1
python39-libs
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.9.25-2.module_el8.10.0+4083+53cad1fb
3.9.25-2.module_el8.10.0+4083+53cad1fb
python39-lxml
AlmaLinux:8
From an advisory covering 12 CVEs
 before 4.6.5-1.module_el8.6.0+2780+a40f65e1
4.6.5-1.module_el8.6.0+2780+a40f65e1
python39-lxml
AlmaLinux:8
From an advisory covering 12 CVEs
 before 4.6.5-1.module_el8.6.0+3248+c431e88c
4.6.5-1.module_el8.6.0+3248+c431e88c
python39-mod_wsgi
AlmaLinux:8
From an advisory covering 12 CVEs
 before 4.7.1-7.module_el8.10.0+3989+a618fe15.1
4.7.1-7.module_el8.10.0+3989+a618fe15.1
python39-more-itertools
AlmaLinux:8
From an advisory covering 12 CVEs
 before 8.5.0-2.module_el8.6.0+2780+a40f65e1
8.5.0-2.module_el8.6.0+2780+a40f65e1
python39-numpy
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.19.4-3.module_el8.6.0+2780+a40f65e1
1.19.4-3.module_el8.6.0+2780+a40f65e1
python39-numpy
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.19.4-3.module_el8.6.0+3248+c431e88c
1.19.4-3.module_el8.6.0+3248+c431e88c
python39-numpy-doc
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.19.4-3.module_el8.6.0+2780+a40f65e1
1.19.4-3.module_el8.6.0+2780+a40f65e1
python39-numpy-f2py
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.19.4-3.module_el8.6.0+2780+a40f65e1
1.19.4-3.module_el8.6.0+2780+a40f65e1
python39-numpy-f2py
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.19.4-3.module_el8.6.0+3248+c431e88c
1.19.4-3.module_el8.6.0+3248+c431e88c
python39-packaging
AlmaLinux:8
From an advisory covering 12 CVEs
 before 20.4-4.module_el8.6.0+2780+a40f65e1
20.4-4.module_el8.6.0+2780+a40f65e1
python39-pip
AlmaLinux:8
From an advisory covering 12 CVEs
 before 20.2.4-9.module_el8.10.0+3765+2f9a457d
20.2.4-9.module_el8.10.0+3765+2f9a457d
python39-pip-wheel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 20.2.4-9.module_el8.10.0+3765+2f9a457d
20.2.4-9.module_el8.10.0+3765+2f9a457d
python39-pluggy
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.13.1-3.module_el8.6.0+2780+a40f65e1
0.13.1-3.module_el8.6.0+2780+a40f65e1
python39-ply
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.11-10.module_el8.6.0+2780+a40f65e1
3.11-10.module_el8.6.0+2780+a40f65e1
python39-psutil
AlmaLinux:8
From an advisory covering 12 CVEs
 before 5.8.0-4.module_el8.6.0+2780+a40f65e1
5.8.0-4.module_el8.6.0+2780+a40f65e1
python39-psutil
AlmaLinux:8
From an advisory covering 12 CVEs
 before 5.8.0-4.module_el8.6.0+3248+c431e88c
5.8.0-4.module_el8.6.0+3248+c431e88c
python-py
Azure Linux:3
 through 1.11.0-1 None known
python3
Azure Linux:3
 before 3.12.9-5
3.12.9-5
python3
Azure Linux:2
 before 3.9.19-16
3.9.19-16
libpython
Bitnami
 before 3.9.24, 3.10.0 up to 3.10.19, 3.11.0 up to 3.11.14, 3.12.0 up to 3.12.12, 3.13.0 up to 3.13.10, 3.14.0 up to 3.14.1
3.9.243.10.193.11.143.12.123.13.103.14.1
python
Bitnami
 before 3.9.24, 3.10.0 up to 3.10.19, 3.11.0 up to 3.11.14, 3.12.0 up to 3.12.12, 3.13.0 up to 3.13.10, 3.14.0 up to 3.14.1
3.9.243.10.193.11.143.12.123.13.103.14.1
python-min
Bitnami
 before 3.9.24, 3.10.0 up to 3.10.19, 3.11.0 up to 3.11.14, 3.12.0 up to 3.12.12, 3.13.0 up to 3.13.10, 3.14.0 up to 3.14.1
3.9.243.10.193.11.143.12.123.13.103.14.1
python-unversioned-command
TuxCare:AlmaLinux:9.2
From an advisory covering 11 CVEs
 before 3.9.16-1.el9_2.2.tuxcare.els22
3.9.16-1.el9_2.2.tuxcare.els22
python3
TuxCare:AlmaLinux:9.2
From an advisory covering 11 CVEs
 before 3.9.16-1.el9_2.2.tuxcare.els22
3.9.16-1.el9_2.2.tuxcare.els22
python3-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 11 CVEs
 before 3.9.16-1.el9_2.2.tuxcare.els22
3.9.16-1.el9_2.2.tuxcare.els22
python3-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 11 CVEs
 before 3.9.16-1.el9_2.2.tuxcare.els22
3.9.16-1.el9_2.2.tuxcare.els22
python3-idle
TuxCare:AlmaLinux:9.2
From an advisory covering 11 CVEs
 before 3.9.16-1.el9_2.2.tuxcare.els22
3.9.16-1.el9_2.2.tuxcare.els22
python3-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 11 CVEs
 before 3.9.16-1.el9_2.2.tuxcare.els22
3.9.16-1.el9_2.2.tuxcare.els22
python3-test
TuxCare:AlmaLinux:9.2
From an advisory covering 11 CVEs
 before 3.9.16-1.el9_2.2.tuxcare.els22
3.9.16-1.el9_2.2.tuxcare.els22
python3-tkinter
TuxCare:AlmaLinux:9.2
From an advisory covering 11 CVEs
 before 3.9.16-1.el9_2.2.tuxcare.els22
3.9.16-1.el9_2.2.tuxcare.els22
python3.11
TuxCare:AlmaLinux:9.2
From an advisory covering 7 CVEs
 before 3.11.2-2.el9_2.2.tuxcare.els23
3.11.2-2.el9_2.2.tuxcare.els23
python3.11-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 7 CVEs
 before 3.11.2-2.el9_2.2.tuxcare.els23
3.11.2-2.el9_2.2.tuxcare.els23
python3.11-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 7 CVEs
 before 3.11.2-2.el9_2.2.tuxcare.els23
3.11.2-2.el9_2.2.tuxcare.els23
python3.11-idle
TuxCare:AlmaLinux:9.2
From an advisory covering 7 CVEs
 before 3.11.2-2.el9_2.2.tuxcare.els23
3.11.2-2.el9_2.2.tuxcare.els23
python3.11-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 7 CVEs
 before 3.11.2-2.el9_2.2.tuxcare.els23
3.11.2-2.el9_2.2.tuxcare.els23
python3.11-test
TuxCare:AlmaLinux:9.2
From an advisory covering 7 CVEs
 before 3.11.2-2.el9_2.2.tuxcare.els23
3.11.2-2.el9_2.2.tuxcare.els23
python3.11-tkinter
TuxCare:AlmaLinux:9.2
From an advisory covering 7 CVEs
 before 3.11.2-2.el9_2.2.tuxcare.els23
3.11.2-2.el9_2.2.tuxcare.els23
python-unversioned-command
TuxCare:AlmaLinux:9.6
From an advisory covering 7 CVEs
 before 3.9.21-2.el9_6.2.tuxcare.els7
3.9.21-2.el9_6.2.tuxcare.els7
python3
TuxCare:AlmaLinux:9.6
From an advisory covering 7 CVEs
 before 3.9.21-2.el9_6.2.tuxcare.els7
3.9.21-2.el9_6.2.tuxcare.els7
python3-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 7 CVEs
 before 3.9.21-2.el9_6.2.tuxcare.els7
3.9.21-2.el9_6.2.tuxcare.els7
python3-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 7 CVEs
 before 3.9.21-2.el9_6.2.tuxcare.els7
3.9.21-2.el9_6.2.tuxcare.els7
python3-idle
TuxCare:AlmaLinux:9.6
From an advisory covering 7 CVEs
 before 3.9.21-2.el9_6.2.tuxcare.els7
3.9.21-2.el9_6.2.tuxcare.els7
python3-libs
TuxCare:AlmaLinux:9.6
From an advisory covering 7 CVEs
 before 3.9.21-2.el9_6.2.tuxcare.els7
3.9.21-2.el9_6.2.tuxcare.els7
python3-test
TuxCare:AlmaLinux:9.6
From an advisory covering 7 CVEs
 before 3.9.21-2.el9_6.2.tuxcare.els7
3.9.21-2.el9_6.2.tuxcare.els7
python3-tkinter
TuxCare:AlmaLinux:9.6
From an advisory covering 7 CVEs
 before 3.9.21-2.el9_6.2.tuxcare.els7
3.9.21-2.el9_6.2.tuxcare.els7
python3.11
TuxCare:AlmaLinux:9.6
From an advisory covering 11 CVEs
 before 3.11.11-2.el9_6.2.tuxcare.els8
3.11.11-2.el9_6.2.tuxcare.els8
python3.11-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 11 CVEs
 before 3.11.11-2.el9_6.2.tuxcare.els8
3.11.11-2.el9_6.2.tuxcare.els8
python3.11-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 11 CVEs
 before 3.11.11-2.el9_6.2.tuxcare.els8
3.11.11-2.el9_6.2.tuxcare.els8
python3.11-idle
TuxCare:AlmaLinux:9.6
From an advisory covering 11 CVEs
 before 3.11.11-2.el9_6.2.tuxcare.els8
3.11.11-2.el9_6.2.tuxcare.els8
python3.11-libs
TuxCare:AlmaLinux:9.6
From an advisory covering 11 CVEs
 before 3.11.11-2.el9_6.2.tuxcare.els8
3.11.11-2.el9_6.2.tuxcare.els8
python3.11-test
TuxCare:AlmaLinux:9.6
From an advisory covering 11 CVEs
 before 3.11.11-2.el9_6.2.tuxcare.els8
3.11.11-2.el9_6.2.tuxcare.els8
python3.11-tkinter
TuxCare:AlmaLinux:9.6
From an advisory covering 11 CVEs
 before 3.11.11-2.el9_6.2.tuxcare.els8
3.11.11-2.el9_6.2.tuxcare.els8
jython
Debian:12
 All versions, plus listed versions
2.7.3+repack1-1
 None known
jython
Debian:13
 All versions, plus listed versions
2.7.3+repack1-1
 None known
jython
Debian:14
 All versions, plus listed versions
2.7.3+repack1-1
 None known
pypy3
Debian:12
 All versions, plus listed versions
7.3.11+dfsg-27.3.11+dfsg-2+deb12u17.3.11+dfsg-2+deb12u27.3.11+dfsg-2+deb12u37.3.12+dfsg-1
Show 27 moreShow less
7.3.12~rc1+dfsg-17.3.12~rc2+dfsg-17.3.13+dfsg-17.3.14+dfsg-17.3.15+dfsg-17.3.16+dfsg-17.3.16+dfsg-27.3.17+dfsg-17.3.17+dfsg-27.3.17+dfsg-37.3.18+dfsg-17.3.18+dfsg-27.3.19+dfsg-17.3.19+dfsg-27.3.20+dfsg-17.3.20+dfsg-27.3.20+dfsg-37.3.20+dfsg-47.3.21+dfsg-17.3.21+dfsg-27.3.21+dfsg-37.3.21+dfsg-47.3.22+dfsg-17.3.23+dfsg-17.3.23+dfsg-28.0.0+dfsg-18.0.1+dfsg-1
 None known
pypy3
Debian:13
 All versions, plus listed versions
7.3.19+dfsg-27.3.20+dfsg-17.3.20+dfsg-27.3.20+dfsg-37.3.20+dfsg-4
Show 9 moreShow less
7.3.21+dfsg-17.3.21+dfsg-27.3.21+dfsg-37.3.21+dfsg-47.3.22+dfsg-17.3.23+dfsg-17.3.23+dfsg-28.0.0+dfsg-18.0.1+dfsg-1
 None known
pypy3
Debian:14
 before 7.3.21+dfsg-1, plus listed versions
7.3.19+dfsg-27.3.20+dfsg-17.3.20+dfsg-27.3.20+dfsg-37.3.20+dfsg-4
7.3.21+dfsg-1
python3.11
Debian:12
 before 3.11.2-6+deb12u7, plus listed versions
3.11.2-63.11.2-6+deb12u13.11.2-6+deb12u23.11.2-6+deb12u33.11.2-6+deb12u43.11.2-6+deb12u53.11.2-6+deb12u6
3.11.2-6+deb12u7
python3.13
Debian:13
 before 3.13.5-2+deb13u1, plus listed versions
3.13.5-2
3.13.5-2+deb13u1
python3.14
Debian:14
 before 3.14.0-3, plus listed versions
3.14.0-13.14.0-23.14.0~a7-13.14.0~b1-13.14.0~b2-1
Show 5 moreShow less
3.14.0~b3-13.14.0~b4-13.14.0~rc1-13.14.0~rc2-13.14.0~rc3-1
3.14.0-3
pypy3
Debian:11
From an advisory covering 8 CVEs
 before 7.3.5+dfsg-2+deb11u5, plus listed versions
7.3.5+dfsg-27.3.5+dfsg-2+deb11u17.3.5+dfsg-2+deb11u27.3.5+dfsg-2+deb11u37.3.5+dfsg-2+deb11u4
7.3.5+dfsg-2+deb11u5
python3.9
Debian:11
From an advisory covering 9 CVEs
 before 3.9.2-1+deb11u4, plus listed versions
3.9.2-13.9.2-1+deb11u13.9.2-1+deb11u23.9.2-1+deb11u3
3.9.2-1+deb11u4
python3
openEuler:20.03-LTS-SP4
From an advisory covering 2 CVEs
 before 3.7.9-47.oe2003sp4
3.7.9-47.oe2003sp4
python3
openEuler:22.03-LTS-SP3
 before 3.9.9-43.oe2203sp3
3.9.9-43.oe2203sp3
python3
openEuler:22.03-LTS-SP4
 before 3.9.9-47.oe2203sp4
3.9.9-47.oe2203sp4
python3
openEuler:24.03-LTS
 before 3.11.6-16.oe2403
3.11.6-16.oe2403
python3
openEuler:24.03-LTS-SP1
 before 3.11.6-18.oe2403sp1
3.11.6-18.oe2403sp1
python3
openEuler:24.03-LTS-SP2
 before 3.11.6-19.oe2403sp2
3.11.6-19.oe2403sp2
python3.12
Red Hat:enterprise_linux:9::appstream
 before 0:3.12.12-1.el9_7
0:3.12.12-1.el9_7
python3.12-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:3.12.12-1.el9_7
0:3.12.12-1.el9_7
python3.12-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:3.12.12-1.el9_7
0:3.12.12-1.el9_7
python3.12-devel
Red Hat:enterprise_linux:9::appstream
 before 0:3.12.12-1.el9_7
0:3.12.12-1.el9_7
python3.12-libs
Red Hat:enterprise_linux:9::appstream
 before 0:3.12.12-1.el9_7
0:3.12.12-1.el9_7
python3.12-tkinter
Red Hat:enterprise_linux:9::appstream
 before 0:3.12.12-1.el9_7
0:3.12.12-1.el9_7
python3.12
Red Hat:enterprise_linux:9::crb
 before 0:3.12.12-1.el9_7
0:3.12.12-1.el9_7
python3.12-debug
Red Hat:enterprise_linux:9::crb
 before 0:3.12.12-1.el9_7
0:3.12.12-1.el9_7
python3.12-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:3.12.12-1.el9_7
0:3.12.12-1.el9_7
python3.12-debugsource
Red Hat:enterprise_linux:9::crb
 before 0:3.12.12-1.el9_7
0:3.12.12-1.el9_7
python3.12-idle
Red Hat:enterprise_linux:9::crb
 before 0:3.12.12-1.el9_7
0:3.12.12-1.el9_7
python3.12-test
Red Hat:enterprise_linux:9::crb
 before 0:3.12.12-1.el9_7
0:3.12.12-1.el9_7
python3.12-tkinter
Red Hat:enterprise_linux:9::crb
 before 0:3.12.12-1.el9_7
0:3.12.12-1.el9_7
python-unversioned-command
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:3.9.25-2.el9_7
0:3.9.25-2.el9_7
python3-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:3.9.25-2.el9_7
0:3.9.25-2.el9_7
python3-tkinter
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:3.9.25-2.el9_7
0:3.9.25-2.el9_7
python3.9-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:3.9.25-2.el9_7
0:3.9.25-2.el9_7
python3.9-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:3.9.25-2.el9_7
0:3.9.25-2.el9_7
python3
Red Hat:enterprise_linux:9::baseos
From an advisory covering 4 CVEs
 before 0:3.9.25-2.el9_7
0:3.9.25-2.el9_7
python3-libs
Red Hat:enterprise_linux:9::baseos
From an advisory covering 4 CVEs
 before 0:3.9.25-2.el9_7
0:3.9.25-2.el9_7
python3.9
Red Hat:enterprise_linux:9::baseos
From an advisory covering 4 CVEs
 before 0:3.9.25-2.el9_7
0:3.9.25-2.el9_7
python3.9-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 4 CVEs
 before 0:3.9.25-2.el9_7
0:3.9.25-2.el9_7
python3.9-debugsource
Red Hat:enterprise_linux:9::baseos
From an advisory covering 4 CVEs
 before 0:3.9.25-2.el9_7
0:3.9.25-2.el9_7
python3
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:3.9.25-2.el9_7
0:3.9.25-2.el9_7
python3-debug
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:3.9.25-2.el9_7
0:3.9.25-2.el9_7
python3-idle
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:3.9.25-2.el9_7
0:3.9.25-2.el9_7
python3-test
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:3.9.25-2.el9_7
0:3.9.25-2.el9_7
python3-tkinter
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:3.9.25-2.el9_7
0:3.9.25-2.el9_7
python3.9-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:3.9.25-2.el9_7
0:3.9.25-2.el9_7
python3.9-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:3.9.25-2.el9_7
0:3.9.25-2.el9_7
PyYAML
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:5.4.1-1.module+el8.9.0+19644+d68f775d
0:5.4.1-1.module+el8.9.0+19644+d68f775d
PyYAML-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:5.4.1-1.module+el8.9.0+19644+d68f775d
0:5.4.1-1.module+el8.9.0+19644+d68f775d
mod_wsgi
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:4.7.1-7.module+el8.10.0+23075+0aa18782.1
0:4.7.1-7.module+el8.10.0+23075+0aa18782.1
numpy
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:1.19.4-3.module+el8.9.0+19644+d68f775d
0:1.19.4-3.module+el8.9.0+19644+d68f775d
numpy-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:1.19.4-3.module+el8.9.0+19644+d68f775d
0:1.19.4-3.module+el8.9.0+19644+d68f775d
python-PyMySQL
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:0.10.1-2.module+el8.9.0+19644+d68f775d
0:0.10.1-2.module+el8.9.0+19644+d68f775d
python-cffi
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:1.14.3-2.module+el8.9.0+19644+d68f775d
0:1.14.3-2.module+el8.9.0+19644+d68f775d
python-cffi-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:1.14.3-2.module+el8.9.0+19644+d68f775d
0:1.14.3-2.module+el8.9.0+19644+d68f775d
python-chardet
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:3.0.4-19.module+el8.9.0+19644+d68f775d
0:3.0.4-19.module+el8.9.0+19644+d68f775d
python-cryptography
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:3.3.1-3.module+el8.10.0+21271+eccd1d86
0:3.3.1-3.module+el8.10.0+21271+eccd1d86
python-cryptography-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:3.3.1-3.module+el8.10.0+21271+eccd1d86
0:3.3.1-3.module+el8.10.0+21271+eccd1d86
python-idna
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:2.10-4.module+el8.10.0+21815+bb024982
0:2.10-4.module+el8.10.0+21815+bb024982
python-lxml
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:4.6.5-1.module+el8.9.0+19644+d68f775d
0:4.6.5-1.module+el8.9.0+19644+d68f775d
python-lxml-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:4.6.5-1.module+el8.9.0+19644+d68f775d
0:4.6.5-1.module+el8.9.0+19644+d68f775d
python-ply
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:3.11-10.module+el8.9.0+19644+d68f775d
0:3.11-10.module+el8.9.0+19644+d68f775d
python-psutil
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:5.8.0-4.module+el8.9.0+19644+d68f775d
0:5.8.0-4.module+el8.9.0+19644+d68f775d
python3.12
Rocky Linux:9
 before 0:3.12.12-1.el9_7
0:3.12.12-1.el9_7
python3.9
Rocky Linux:9
From an advisory covering 4 CVEs
 before 0:3.9.25-2.el9_7
0:3.9.25-2.el9_7
PyYAML
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:5.4.1-1.module+el8.10.0+1860+afcc1c71
0:5.4.1-1.module+el8.10.0+1860+afcc1c71
PyYAML
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:5.4.1-1.module+el8.9.0+1418+f0d66789
0:5.4.1-1.module+el8.9.0+1418+f0d66789
PyYAML
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:5.4.1-1.module+el8.10.0+1582+bc278001
0:5.4.1-1.module+el8.10.0+1582+bc278001
Cython
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:0.29.21-5.module+el8.10.0+1582+bc278001
0:0.29.21-5.module+el8.10.0+1582+bc278001
Cython
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:0.29.21-5.module+el8.10.0+1860+afcc1c71
0:0.29.21-5.module+el8.10.0+1860+afcc1c71
mod_wsgi
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:4.7.1-7.module+el8.10.0+1978+d4f111ba.1
0:4.7.1-7.module+el8.10.0+1978+d4f111ba.1
mod_wsgi
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:4.7.1-7.module+el8.10.0+1582+bc278001
0:4.7.1-7.module+el8.10.0+1582+bc278001
mod_wsgi
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:4.7.1-7.module+el8.10.0+1860+afcc1c71
0:4.7.1-7.module+el8.10.0+1860+afcc1c71
numpy
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:1.19.4-3.module+el8.10.0+1582+bc278001
0:1.19.4-3.module+el8.10.0+1582+bc278001
numpy
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:1.19.4-3.module+el8.10.0+1860+afcc1c71
0:1.19.4-3.module+el8.10.0+1860+afcc1c71
pybind11
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.7.1-1.module+el8.9.0+1357+a3b80af7
0:2.7.1-1.module+el8.9.0+1357+a3b80af7
pytest
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:6.0.2-2.module+el8.10.0+1860+afcc1c71
0:6.0.2-2.module+el8.10.0+1860+afcc1c71
pytest
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:6.0.2-2.module+el8.10.0+1582+bc278001
0:6.0.2-2.module+el8.10.0+1582+bc278001
python3x-pip
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:20.2.4-9.module+el8.10.0+1721+e52d6351
0:20.2.4-9.module+el8.10.0+1721+e52d6351
python3x-pip
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:20.2.4-9.module+el8.10.0+1860+afcc1c71
0:20.2.4-9.module+el8.10.0+1860+afcc1c71
python3x-pyparsing
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.4.7-5.module+el8.10.0+1860+afcc1c71
0:2.4.7-5.module+el8.10.0+1860+afcc1c71
python3x-pyparsing
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.4.7-5.module+el8.10.0+1582+bc278001
0:2.4.7-5.module+el8.10.0+1582+bc278001
python3x-setuptools
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:50.3.2-7.module+el8.10.0+2057+30213a2b
0:50.3.2-7.module+el8.10.0+2057+30213a2b
python3x-six
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:1.15.0-3.module+el8.10.0+1582+bc278001
0:1.15.0-3.module+el8.10.0+1582+bc278001
python3x-six
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:1.15.0-3.module+el8.10.0+1860+afcc1c71
0:1.15.0-3.module+el8.10.0+1860+afcc1c71
python-attrs
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:20.3.0-2.module+el8.10.0+1582+bc278001
0:20.3.0-2.module+el8.10.0+1582+bc278001
python-attrs
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:20.3.0-2.module+el8.10.0+1860+afcc1c71
0:20.3.0-2.module+el8.10.0+1860+afcc1c71
python-cffi
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:1.14.3-2.module+el8.10.0+1860+afcc1c71
0:1.14.3-2.module+el8.10.0+1860+afcc1c71
python-cffi
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:1.14.3-2.module+el8.10.0+1582+bc278001
0:1.14.3-2.module+el8.10.0+1582+bc278001
python-chardet
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.0.4-19.module+el8.10.0+1582+bc278001
0:3.0.4-19.module+el8.10.0+1582+bc278001
python-chardet
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.0.4-19.module+el8.10.0+1860+afcc1c71
0:3.0.4-19.module+el8.10.0+1860+afcc1c71
python-chardet
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.0.4-19.module+el8.9.0+1418+f0d66789
0:3.0.4-19.module+el8.9.0+1418+f0d66789
python-cryptography
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.3.1-3.module+el8.10.0+1697+7e517775
0:3.3.1-3.module+el8.10.0+1697+7e517775
python-cryptography
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.3.1-3.module+el8.10.0+1860+afcc1c71
0:3.3.1-3.module+el8.10.0+1860+afcc1c71
python-idna
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.10-4.module+el8.10.0+1860+afcc1c71
0:2.10-4.module+el8.10.0+1860+afcc1c71
python-idna
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.10-4.module+el8.10.0+1809+41195054
0:2.10-4.module+el8.10.0+1809+41195054
python-iniconfig
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:1.1.1-2.module+el8.9.0+1332+dd574197
0:1.1.1-2.module+el8.9.0+1332+dd574197
python-lxml
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:4.6.5-1.module+el8.10.0+1582+bc278001
0:4.6.5-1.module+el8.10.0+1582+bc278001
python-more-itertools
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:8.5.0-2.module+el8.10.0+1582+bc278001
0:8.5.0-2.module+el8.10.0+1582+bc278001
python-more-itertools
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:8.5.0-2.module+el8.10.0+1860+afcc1c71
0:8.5.0-2.module+el8.10.0+1860+afcc1c71
python-packaging
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:20.4-4.module+el8.10.0+1860+afcc1c71
0:20.4-4.module+el8.10.0+1860+afcc1c71
python-packaging
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:20.4-4.module+el8.10.0+1582+bc278001
0:20.4-4.module+el8.10.0+1582+bc278001
python-pluggy
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:0.13.1-3.module+el8.10.0+1582+bc278001
0:0.13.1-3.module+el8.10.0+1582+bc278001
python-pluggy
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:0.13.1-3.module+el8.10.0+1860+afcc1c71
0:0.13.1-3.module+el8.10.0+1860+afcc1c71
python-ply
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.11-10.module+el8.9.0+1418+f0d66789
0:3.11-10.module+el8.9.0+1418+f0d66789
python-ply
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.11-10.module+el8.10.0+1582+bc278001
0:3.11-10.module+el8.10.0+1582+bc278001
python-ply
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.11-10.module+el8.10.0+1860+afcc1c71
0:3.11-10.module+el8.10.0+1860+afcc1c71
python-psutil
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:5.8.0-4.module+el8.9.0+1357+a3b80af7
0:5.8.0-4.module+el8.9.0+1357+a3b80af7
python-psycopg2
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.8.6-3.module+el8.10.0+1660+b5b6f004
0:2.8.6-3.module+el8.10.0+1660+b5b6f004
python311
SUSE:Linux Micro 6.0
From an advisory covering 2 CVEs
 before 3.11.14-1.1
3.11.14-1.1
python311-core
SUSE:Linux Micro 6.0
From an advisory covering 2 CVEs
 before 3.11.14-1.1
3.11.14-1.1
python311
SUSE:Linux Micro 6.1
From an advisory covering 2 CVEs
 before 3.11.14-slfo.1.1_1.1
3.11.14-slfo.1.1_1.1
python311-core
SUSE:Linux Micro 6.1
From an advisory covering 2 CVEs
 before 3.11.14-slfo.1.1_1.1
3.11.14-slfo.1.1_1.1
python39
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 3.9.24-150300.4.84.1
3.9.24-150300.4.84.1
python39-core
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 3.9.24-150300.4.84.1
3.9.24-150300.4.84.1
python39-documentation
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 3.9.24-150300.4.84.1
3.9.24-150300.4.84.1
python311
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311-core
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311-core
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311-documentation
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311-core
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311-documentation
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311-core
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311-documentation
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311-core
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311-documentation
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311-core
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311-documentation
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311-core
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311-documentation
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311-core
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311-documentation
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311-core
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python311-documentation
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 2 CVEs
 before 3.11.14-150400.9.69.1
3.11.14-150400.9.69.1
python312
SUSE:Linux Enterprise Module for Python 3 15 SP6
From an advisory covering 2 CVEs
 before 3.12.12-150600.3.37.1
3.12.12-150600.3.37.1
python312-core
SUSE:Linux Enterprise Module for Python 3 15 SP6
From an advisory covering 2 CVEs
 before 3.12.12-150600.3.37.1
3.12.12-150600.3.37.1
python312
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 3.12.12-150600.3.37.1
3.12.12-150600.3.37.1
python312-core
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 3.12.12-150600.3.37.1
3.12.12-150600.3.37.1
python312-documentation
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 3.12.12-150600.3.37.1
3.12.12-150600.3.37.1
python313
SUSE:Linux Enterprise Module for Python 3 15 SP7
From an advisory covering 2 CVEs
 before 3.13.9-150700.4.26.1
3.13.9-150700.4.26.1
python313-core
SUSE:Linux Enterprise Module for Python 3 15 SP7
From an advisory covering 2 CVEs
 before 3.13.9-150700.4.26.1
3.13.9-150700.4.26.1
python311-core
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 2 CVEs
 before 3.11.14-150600.3.38.1
3.11.14-150600.3.38.1
python311-core
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 2 CVEs
 before 3.11.14-150600.3.38.1
3.11.14-150600.3.38.1
python311
SUSE:Linux Enterprise Module for Python 3 15 SP6
From an advisory covering 2 CVEs
 before 3.11.14-150600.3.38.1
3.11.14-150600.3.38.1
python311-core
SUSE:Linux Enterprise Module for Python 3 15 SP6
From an advisory covering 2 CVEs
 before 3.11.14-150600.3.38.1
3.11.14-150600.3.38.1
python311
SUSE:Linux Enterprise Module for Python 3 15 SP7
From an advisory covering 2 CVEs
 before 3.11.14-150600.3.38.1
3.11.14-150600.3.38.1
python311-core
SUSE:Linux Enterprise Module for Python 3 15 SP7
From an advisory covering 2 CVEs
 before 3.11.14-150600.3.38.1
3.11.14-150600.3.38.1
python311
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 3.11.14-150600.3.38.1
3.11.14-150600.3.38.1
python311-core
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 3.11.14-150600.3.38.1
3.11.14-150600.3.38.1
python311-documentation
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 3.11.14-150600.3.38.1
3.11.14-150600.3.38.1
python
SUSE:Linux Enterprise Module for Package Hub 15 SP6
 before 2.7.18-150000.86.1
2.7.18-150000.86.1
python-base
SUSE:Linux Enterprise Module for Package Hub 15 SP6
 before 2.7.18-150000.86.1
2.7.18-150000.86.1
python
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 2.7.18-150000.86.1
2.7.18-150000.86.1
python-base
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 2.7.18-150000.86.1
2.7.18-150000.86.1
python
openSUSE:Leap 15.6
 before 2.7.18-150000.86.1
2.7.18-150000.86.1
python-base
openSUSE:Leap 15.6
 before 2.7.18-150000.86.1
2.7.18-150000.86.1
python-doc
openSUSE:Leap 15.6
 before 2.7.18-150000.86.1
2.7.18-150000.86.1
python310
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 3.10.19-150400.4.91.3
3.10.19-150400.4.91.3
python310-core
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 3.10.19-150400.4.91.3
3.10.19-150400.4.91.3
python310-documentation
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 3.10.19-150400.4.91.3
3.10.19-150400.4.91.3
python3
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 2 CVEs
 before 3.6.15-150300.10.100.1
3.6.15-150300.10.100.1
python3-core
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 2 CVEs
 before 3.6.15-150300.10.100.1
3.6.15-150300.10.100.1
python3
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 3.6.15-150300.10.100.1
3.6.15-150300.10.100.1
python3-core
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 3.6.15-150300.10.100.1
3.6.15-150300.10.100.1
python3-documentation
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 3.6.15-150300.10.100.1
3.6.15-150300.10.100.1
python
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 2.7.18-150000.89.1
2.7.18-150000.89.1
python-base
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 2.7.18-150000.89.2
2.7.18-150000.89.2
python-doc
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 2.7.18-150000.89.1
2.7.18-150000.89.1
python2.7
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
2.7.5-8ubuntu32.7.5-8ubuntu42.7.6-22.7.6-2ubuntu12.7.6-3
Show 35 moreShow less
2.7.6-3ubuntu12.7.6-42.7.6-4ubuntu12.7.6-52.7.6-72.7.6-82.7.6-8ubuntu0.22.7.6-8ubuntu0.32.7.6-8ubuntu0.42.7.6-8ubuntu0.52.7.6-8ubuntu0.6+esm22.7.6-8ubuntu0.6+esm32.7.6-8ubuntu0.6+esm52.7.6-8ubuntu0.6+esm62.7.6-8ubuntu0.6+esm72.7.6-8ubuntu0.6+esm82.7.6-8ubuntu0.6+esm92.7.6-8ubuntu0.6+esm102.7.6-8ubuntu0.6+esm112.7.6-8ubuntu0.6+esm122.7.6-8ubuntu0.6+esm132.7.6-8ubuntu0.6+esm142.7.6-8ubuntu0.6+esm152.7.6-8ubuntu0.6+esm162.7.6-8ubuntu0.6+esm172.7.6-8ubuntu0.6+esm182.7.6-8ubuntu0.6+esm202.7.6-8ubuntu0.6+esm212.7.6-8ubuntu0.6+esm222.7.6-8ubuntu0.6+esm242.7.6-8ubuntu0.6+esm252.7.6-8ubuntu0.6+esm262.7.6-8ubuntu0.6+esm282.7.6-8ubuntu0.6+esm292.7.6-8ubuntu0.6+esm30
 None known
python3.4
Ubuntu:Pro:14.04:LTS
 before 3.4.3-1ubuntu1~14.04.7+esm17, plus listed versions
3.4~b1-0ubuntu33.4~b1-4ubuntu43.4~b1-4ubuntu63.4~b1-5ubuntu23.4~b2-1
Show 25 moreShow less
3.4~b3-1ubuntu13.4~rc1-1build13.4~rc2-13.4~rc3-0ubuntu13.4.0-13.4.0-2ubuntu13.4.0-2ubuntu1.13.4.3-1ubuntu1~14.04.13.4.3-1ubuntu1~14.04.33.4.3-1ubuntu1~14.04.43.4.3-1ubuntu1~14.04.53.4.3-1ubuntu1~14.04.63.4.3-1ubuntu1~14.04.73.4.3-1ubuntu1~14.04.7+esm23.4.3-1ubuntu1~14.04.7+esm43.4.3-1ubuntu1~14.04.7+esm63.4.3-1ubuntu1~14.04.7+esm73.4.3-1ubuntu1~14.04.7+esm83.4.3-1ubuntu1~14.04.7+esm103.4.3-1ubuntu1~14.04.7+esm113.4.3-1ubuntu1~14.04.7+esm123.4.3-1ubuntu1~14.04.7+esm133.4.3-1ubuntu1~14.04.7+esm143.4.3-1ubuntu1~14.04.7+esm153.4.3-1ubuntu1~14.04.7+esm16
3.4.3-1ubuntu1~14.04.7+esm17
python3.5
Ubuntu:Pro:14.04:LTS
 before 3.5.2-2ubuntu0~16.04.4~14.04.1+esm8, plus listed versions
3.5.2-2ubuntu0~16.04.4~14.04.13.5.2-2ubuntu0~16.04.4~14.04.1+esm13.5.2-2ubuntu0~16.04.4~14.04.1+esm33.5.2-2ubuntu0~16.04.4~14.04.1+esm43.5.2-2ubuntu0~16.04.4~14.04.1+esm53.5.2-2ubuntu0~16.04.4~14.04.1+esm63.5.2-2ubuntu0~16.04.4~14.04.1+esm7
3.5.2-2ubuntu0~16.04.4~14.04.1+esm8
python3.5
Ubuntu:Pro:16.04:LTS
 before 3.5.2-2ubuntu0~16.04.13+esm20, plus listed versions
3.5.0-33.5.0-3ubuntu13.5.1~rc1-2ubuntu13.5.1-13.5.1-2
Show 37 moreShow less
3.5.1-33.5.1-53.5.1-6ubuntu13.5.1-6ubuntu23.5.1-9ubuntu13.5.1-103.5.2-2~16.013.5.2-2~16.043.5.2-2ubuntu0~16.04.13.5.2-2ubuntu0~16.04.23.5.2-2ubuntu0~16.04.33.5.2-2ubuntu0~16.04.43.5.2-2ubuntu0~16.04.53.5.2-2ubuntu0~16.04.83.5.2-2ubuntu0~16.04.93.5.2-2ubuntu0~16.04.103.5.2-2ubuntu0~16.04.113.5.2-2ubuntu0~16.04.123.5.2-2ubuntu0~16.04.133.5.2-2ubuntu0~16.04.13+esm13.5.2-2ubuntu0~16.04.13+esm23.5.2-2ubuntu0~16.04.13+esm33.5.2-2ubuntu0~16.04.13+esm53.5.2-2ubuntu0~16.04.13+esm63.5.2-2ubuntu0~16.04.13+esm73.5.2-2ubuntu0~16.04.13+esm83.5.2-2ubuntu0~16.04.13+esm93.5.2-2ubuntu0~16.04.13+esm103.5.2-2ubuntu0~16.04.13+esm113.5.2-2ubuntu0~16.04.13+esm123.5.2-2ubuntu0~16.04.13+esm133.5.2-2ubuntu0~16.04.13+esm143.5.2-2ubuntu0~16.04.13+esm153.5.2-2ubuntu0~16.04.13+esm163.5.2-2ubuntu0~16.04.13+esm173.5.2-2ubuntu0~16.04.13+esm183.5.2-2ubuntu0~16.04.13+esm19
3.5.2-2ubuntu0~16.04.13+esm20
python2.7
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2.7.10-4ubuntu12.7.10-4ubuntu22.7.11-22.7.11-32.7.11-4
Show 37 moreShow less
2.7.11-62.7.11-72.7.11-7ubuntu12.7.12-1~16.042.7.12-1ubuntu0~16.04.12.7.12-1ubuntu0~16.04.22.7.12-1ubuntu0~16.04.32.7.12-1ubuntu0~16.04.42.7.12-1ubuntu0~16.04.82.7.12-1ubuntu0~16.04.92.7.12-1ubuntu0~16.04.112.7.12-1ubuntu0~16.04.122.7.12-1ubuntu0~16.04.132.7.12-1ubuntu0~16.04.142.7.12-1ubuntu0~16.04.162.7.12-1ubuntu0~16.04.182.7.12-1ubuntu0~16.04.18+esm12.7.12-1ubuntu0~16.04.18+esm22.7.12-1ubuntu0~16.04.18+esm32.7.12-1ubuntu0~16.04.18+esm42.7.12-1ubuntu0~16.04.18+esm52.7.12-1ubuntu0~16.04.18+esm62.7.12-1ubuntu0~16.04.18+esm72.7.12-1ubuntu0~16.04.18+esm82.7.12-1ubuntu0~16.04.18+esm92.7.12-1ubuntu0~16.04.18+esm102.7.12-1ubuntu0~16.04.18+esm112.7.12-1ubuntu0~16.04.18+esm122.7.12-1ubuntu0~16.04.18+esm132.7.12-1ubuntu0~16.04.18+esm152.7.12-1ubuntu0~16.04.18+esm162.7.12-1ubuntu0~16.04.18+esm172.7.12-1ubuntu0~16.04.18+esm182.7.12-1ubuntu0~16.04.18+esm192.7.12-1ubuntu0~16.04.18+esm202.7.12-1ubuntu0~16.04.18+esm212.7.12-1ubuntu0~16.04.18+esm22
 None known
python2.7
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.7.14-2ubuntu22.7.14-42.7.14-62.7.14-72.7.14-8
Show 31 moreShow less
2.7.15~rc1-12.7.15~rc1-1ubuntu0.12.7.15-4ubuntu4~18.042.7.15-4ubuntu4~18.04.12.7.15-4ubuntu4~18.04.22.7.17-1~18.042.7.17-1~18.04ubuntu12.7.17-1~18.04ubuntu1.12.7.17-1~18.04ubuntu1.22.7.17-1~18.04ubuntu1.32.7.17-1~18.04ubuntu1.52.7.17-1~18.04ubuntu1.62.7.17-1~18.04ubuntu1.72.7.17-1~18.04ubuntu1.82.7.17-1~18.04ubuntu1.102.7.17-1~18.04ubuntu1.112.7.17-1~18.04ubuntu1.132.7.17-1~18.04ubuntu1.13+esm12.7.17-1~18.04ubuntu1.13+esm22.7.17-1~18.04ubuntu1.13+esm32.7.17-1~18.04ubuntu1.13+esm42.7.17-1~18.04ubuntu1.13+esm52.7.17-1~18.04ubuntu1.13+esm62.7.17-1~18.04ubuntu1.13+esm72.7.17-1~18.04ubuntu1.13+esm82.7.17-1~18.04ubuntu1.13+esm102.7.17-1~18.04ubuntu1.13+esm112.7.17-1~18.04ubuntu1.13+esm122.7.17-1~18.04ubuntu1.13+esm132.7.17-1~18.04ubuntu1.13+esm142.7.17-1~18.04ubuntu1.13+esm15
 None known
python3.6
Ubuntu:Pro:18.04:LTS
 before 3.6.9-1~18.04ubuntu1.13+esm7, plus listed versions
3.6.3-1ubuntu13.6.4~rc1-13.6.4~rc1-23.6.4-13.6.4-2
Show 27 moreShow less
3.6.4-3build13.6.4-43.6.5~rc1-13.6.5-33.6.6-1~18.043.6.7-1~18.043.6.8-1~18.04.13.6.8-1~18.04.23.6.8-1~18.04.33.6.9-1~18.043.6.9-1~18.04ubuntu13.6.9-1~18.04ubuntu1.13.6.9-1~18.04ubuntu1.33.6.9-1~18.04ubuntu1.43.6.9-1~18.04ubuntu1.63.6.9-1~18.04ubuntu1.73.6.9-1~18.04ubuntu1.83.6.9-1~18.04ubuntu1.93.6.9-1~18.04ubuntu1.103.6.9-1~18.04ubuntu1.123.6.9-1~18.04ubuntu1.133.6.9-1~18.04ubuntu1.13+esm13.6.9-1~18.04ubuntu1.13+esm23.6.9-1~18.04ubuntu1.13+esm33.6.9-1~18.04ubuntu1.13+esm43.6.9-1~18.04ubuntu1.13+esm53.6.9-1~18.04ubuntu1.13+esm6
3.6.9-1~18.04ubuntu1.13+esm7
python3.7
Ubuntu:Pro:18.04:LTS
 before 3.7.5-2ubuntu1~18.04.2+esm8, plus listed versions
3.7.0~a2-13.7.0~a3-13.7.0~a3-23.7.0~a3-33.7.0~a4-1
Show 17 moreShow less
3.7.0~b1-13.7.0~b1-1build13.7.0~b2-13.7.0~b3-13.7.0-1~18.043.7.1-1~18.043.7.3-2~18.04.13.7.5-2~18.043.7.5-2~18.04.43.7.5-2ubuntu1~18.04.23.7.5-2ubuntu1~18.04.2+esm13.7.5-2ubuntu1~18.04.2+esm23.7.5-2ubuntu1~18.04.2+esm33.7.5-2ubuntu1~18.04.2+esm43.7.5-2ubuntu1~18.04.2+esm53.7.5-2ubuntu1~18.04.2+esm63.7.5-2ubuntu1~18.04.2+esm7
3.7.5-2ubuntu1~18.04.2+esm8
python3.8
Ubuntu:Pro:18.04:LTS
 before 3.8.0-3ubuntu1~18.04.2+esm7, plus listed versions
3.8.0-3~18.043.8.0-3~18.04.13.8.0-3ubuntu1~18.04.23.8.0-3ubuntu1~18.04.2+esm13.8.0-3ubuntu1~18.04.2+esm2
Show 4 moreShow less
3.8.0-3ubuntu1~18.04.2+esm33.8.0-3ubuntu1~18.04.2+esm43.8.0-3ubuntu1~18.04.2+esm53.8.0-3ubuntu1~18.04.2+esm6
3.8.0-3ubuntu1~18.04.2+esm7
python3.8
Ubuntu:Pro:20.04:LTS
 before 3.8.10-0ubuntu1~20.04.18+esm3, plus listed versions
3.8.0-13.8.0-23.8.0-33.8.0-43.8.0-5
Show 29 moreShow less
3.8.1-2ubuntu33.8.2~rc1-1ubuntu13.8.2-13.8.2-1ubuntu13.8.2-1ubuntu1.13.8.2-1ubuntu1.23.8.5-1~20.043.8.5-1~20.04.23.8.5-1~20.04.33.8.10-0ubuntu1~20.043.8.10-0ubuntu1~20.04.13.8.10-0ubuntu1~20.04.23.8.10-0ubuntu1~20.04.43.8.10-0ubuntu1~20.04.53.8.10-0ubuntu1~20.04.63.8.10-0ubuntu1~20.04.73.8.10-0ubuntu1~20.04.83.8.10-0ubuntu1~20.04.93.8.10-0ubuntu1~20.04.103.8.10-0ubuntu1~20.04.113.8.10-0ubuntu1~20.04.123.8.10-0ubuntu1~20.04.133.8.10-0ubuntu1~20.04.143.8.10-0ubuntu1~20.04.153.8.10-0ubuntu1~20.04.163.8.10-0ubuntu1~20.04.173.8.10-0ubuntu1~20.04.183.8.10-0ubuntu1~20.04.18+esm13.8.10-0ubuntu1~20.04.18+esm2
3.8.10-0ubuntu1~20.04.18+esm3
python2.7
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2.7.17~rc1-12.7.17-12.7.17-1ubuntu52.7.17-1ubuntu62.7.18~rc1-2
Show 22 moreShow less
2.7.18-1~20.042.7.18-1~20.04.12.7.18-1~20.04.1+esm12.7.18-1~20.04.32.7.18-1~20.04.3+esm12.7.18-1~20.04.42.7.18-1~20.04.4+esm12.7.18-1~20.04.4+esm22.7.18-1~20.04.4+esm32.7.18-1~20.04.52.7.18-1~20.04.5+esm12.7.18-1~20.04.5+esm22.7.18-1~20.04.62.7.18-1~20.04.6+esm12.7.18-1~20.04.72.7.18-1~20.04.7+esm32.7.18-1~20.04.7+esm42.7.18-1~20.04.7+esm62.7.18-1~20.04.7+esm72.7.18-1~20.04.7+esm82.7.18-1~20.04.7+esm92.7.18-1~20.04.7+esm10
 None known
python3.9
Ubuntu:Pro:20.04:LTS
 before 3.9.5-3ubuntu0~20.04.1+esm7, plus listed versions
3.9.0~rc1-1~20.043.9.0-5~20.043.9.5-3~20.04.13.9.5-3ubuntu0~20.04.13.9.5-3ubuntu0~20.04.1+esm1
Show 5 moreShow less
3.9.5-3ubuntu0~20.04.1+esm23.9.5-3ubuntu0~20.04.1+esm33.9.5-3ubuntu0~20.04.1+esm43.9.5-3ubuntu0~20.04.1+esm53.9.5-3ubuntu0~20.04.1+esm6
3.9.5-3ubuntu0~20.04.1+esm7
python3.10
Ubuntu:22.04:LTS
 before 3.10.12-1~22.04.12, plus listed versions
3.10.0-23.10.0-33.10.0-43.10.0-53.10.0-5build1
Show 23 moreShow less
3.10.1-13.10.1-23.10.2-13.10.2-53.10.2-73.10.3-13.10.4-33.10.4-3ubuntu0.13.10.6-1~22.043.10.6-1~22.04.13.10.6-1~22.04.23.10.6-1~22.04.2ubuntu13.10.6-1~22.04.2ubuntu1.13.10.12-1~22.04.23.10.12-1~22.04.33.10.12-1~22.04.43.10.12-1~22.04.53.10.12-1~22.04.63.10.12-1~22.04.73.10.12-1~22.04.83.10.12-1~22.04.93.10.12-1~22.04.103.10.12-1~22.04.11
3.10.12-1~22.04.12
python2.7
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
2.7.18-8build12.7.18-132.7.18-13ubuntu12.7.18-13ubuntu1.12.7.18-13ubuntu1.1+esm2
Show 16 moreShow less
2.7.18-13ubuntu1.22.7.18-13ubuntu1.2+esm12.7.18-13ubuntu1.2+esm22.7.18-13ubuntu1.2+esm32.7.18-13ubuntu1.32.7.18-13ubuntu1.3+esm12.7.18-13ubuntu1.42.7.18-13ubuntu1.4+esm12.7.18-13ubuntu1.52.7.18-13ubuntu1.5+esm22.7.18-13ubuntu1.5+esm32.7.18-13ubuntu1.5+esm52.7.18-13ubuntu1.5+esm62.7.18-13ubuntu1.5+esm72.7.18-13ubuntu1.5+esm82.7.18-13ubuntu1.5+esm9
 None known
python3.11
Ubuntu:Pro:22.04:LTS
 before 3.11.0~rc1-1~22.04.1~esm6, plus listed versions
3.11.0~rc1-1~22.043.11.0~rc1-1~22.04.1~esm13.11.0~rc1-1~22.04.1~esm23.11.0~rc1-1~22.04.1~esm33.11.0~rc1-1~22.04.1~esm43.11.0~rc1-1~22.04.1~esm5
3.11.0~rc1-1~22.04.1~esm6
python3.12
Ubuntu:24.04:LTS
 before 3.12.3-1ubuntu0.9, plus listed versions
3.12.0-13.12.0-53.12.0-63.12.0-73.12.1-2
Show 13 moreShow less
3.12.2-13.12.2-4build33.12.2-4build43.12.2-5ubuntu33.12.3-13.12.3-1ubuntu0.13.12.3-1ubuntu0.23.12.3-1ubuntu0.33.12.3-1ubuntu0.43.12.3-1ubuntu0.53.12.3-1ubuntu0.63.12.3-1ubuntu0.73.12.3-1ubuntu0.8
3.12.3-1ubuntu0.9
python3.13
Ubuntu:25.10
 before 3.13.7-1ubuntu0.1, plus listed versions
3.13.3-13.13.3-23.13.3-43.13.4-13.13.5-13.13.5-23.13.6-13.13.7-1
3.13.7-1ubuntu0.1
python3.14
Ubuntu:25.10
 All versions, plus listed versions
3.14.0~a7-0ubuntu13.14.0~b1-13.14.0~b3-13.14.0~rc1-13.14.0~rc2-1
Show 5 moreShow less
3.14.0~rc3-13.14.0-13.14.0-1ubuntu0.13.14.0-1ubuntu0.23.14.0-1ubuntu0.3
 None known
python3.4
Ubuntu:Pro:14.04:LTS
From an advisory covering 2 CVEs
 before 3.4.3-1ubuntu1~14.04.7+esm17, plus listed versions
3.4~b1-0ubuntu33.4~b1-4ubuntu43.4~b1-4ubuntu63.4~b1-5ubuntu23.4~b2-1
Show 25 moreShow less
3.4~b3-1ubuntu13.4~rc1-1build13.4~rc2-13.4~rc3-0ubuntu13.4.0-13.4.0-2ubuntu13.4.0-2ubuntu1.13.4.3-1ubuntu1~14.04.13.4.3-1ubuntu1~14.04.33.4.3-1ubuntu1~14.04.43.4.3-1ubuntu1~14.04.53.4.3-1ubuntu1~14.04.63.4.3-1ubuntu1~14.04.73.4.3-1ubuntu1~14.04.7+esm23.4.3-1ubuntu1~14.04.7+esm43.4.3-1ubuntu1~14.04.7+esm63.4.3-1ubuntu1~14.04.7+esm73.4.3-1ubuntu1~14.04.7+esm83.4.3-1ubuntu1~14.04.7+esm103.4.3-1ubuntu1~14.04.7+esm113.4.3-1ubuntu1~14.04.7+esm123.4.3-1ubuntu1~14.04.7+esm133.4.3-1ubuntu1~14.04.7+esm143.4.3-1ubuntu1~14.04.7+esm153.4.3-1ubuntu1~14.04.7+esm16
3.4.3-1ubuntu1~14.04.7+esm17
python3.5
Ubuntu:Pro:14.04:LTS
From an advisory covering 2 CVEs
 before 3.5.2-2ubuntu0~16.04.4~14.04.1+esm8, plus listed versions
3.5.2-2ubuntu0~16.04.4~14.04.13.5.2-2ubuntu0~16.04.4~14.04.1+esm13.5.2-2ubuntu0~16.04.4~14.04.1+esm33.5.2-2ubuntu0~16.04.4~14.04.1+esm43.5.2-2ubuntu0~16.04.4~14.04.1+esm53.5.2-2ubuntu0~16.04.4~14.04.1+esm63.5.2-2ubuntu0~16.04.4~14.04.1+esm7
3.5.2-2ubuntu0~16.04.4~14.04.1+esm8
python3.5
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
 before 3.5.2-2ubuntu0~16.04.13+esm20, plus listed versions
3.5.0-33.5.0-3ubuntu13.5.1~rc1-2ubuntu13.5.1-13.5.1-2
Show 37 moreShow less
3.5.1-33.5.1-53.5.1-6ubuntu13.5.1-6ubuntu23.5.1-9ubuntu13.5.1-103.5.2-2~16.013.5.2-2~16.043.5.2-2ubuntu0~16.04.13.5.2-2ubuntu0~16.04.23.5.2-2ubuntu0~16.04.33.5.2-2ubuntu0~16.04.43.5.2-2ubuntu0~16.04.53.5.2-2ubuntu0~16.04.83.5.2-2ubuntu0~16.04.93.5.2-2ubuntu0~16.04.103.5.2-2ubuntu0~16.04.113.5.2-2ubuntu0~16.04.123.5.2-2ubuntu0~16.04.133.5.2-2ubuntu0~16.04.13+esm13.5.2-2ubuntu0~16.04.13+esm23.5.2-2ubuntu0~16.04.13+esm33.5.2-2ubuntu0~16.04.13+esm53.5.2-2ubuntu0~16.04.13+esm63.5.2-2ubuntu0~16.04.13+esm73.5.2-2ubuntu0~16.04.13+esm83.5.2-2ubuntu0~16.04.13+esm93.5.2-2ubuntu0~16.04.13+esm103.5.2-2ubuntu0~16.04.13+esm113.5.2-2ubuntu0~16.04.13+esm123.5.2-2ubuntu0~16.04.13+esm133.5.2-2ubuntu0~16.04.13+esm143.5.2-2ubuntu0~16.04.13+esm153.5.2-2ubuntu0~16.04.13+esm163.5.2-2ubuntu0~16.04.13+esm173.5.2-2ubuntu0~16.04.13+esm183.5.2-2ubuntu0~16.04.13+esm19
3.5.2-2ubuntu0~16.04.13+esm20
python3.6
Ubuntu:Pro:18.04:LTS
From an advisory covering 2 CVEs
 before 3.6.9-1~18.04ubuntu1.13+esm7, plus listed versions
3.6.3-1ubuntu13.6.4~rc1-13.6.4~rc1-23.6.4-13.6.4-2
Show 27 moreShow less
3.6.4-3build13.6.4-43.6.5~rc1-13.6.5-33.6.6-1~18.043.6.7-1~18.043.6.8-1~18.04.13.6.8-1~18.04.23.6.8-1~18.04.33.6.9-1~18.043.6.9-1~18.04ubuntu13.6.9-1~18.04ubuntu1.13.6.9-1~18.04ubuntu1.33.6.9-1~18.04ubuntu1.43.6.9-1~18.04ubuntu1.63.6.9-1~18.04ubuntu1.73.6.9-1~18.04ubuntu1.83.6.9-1~18.04ubuntu1.93.6.9-1~18.04ubuntu1.103.6.9-1~18.04ubuntu1.123.6.9-1~18.04ubuntu1.133.6.9-1~18.04ubuntu1.13+esm13.6.9-1~18.04ubuntu1.13+esm23.6.9-1~18.04ubuntu1.13+esm33.6.9-1~18.04ubuntu1.13+esm43.6.9-1~18.04ubuntu1.13+esm53.6.9-1~18.04ubuntu1.13+esm6
3.6.9-1~18.04ubuntu1.13+esm7
python3.7
Ubuntu:Pro:18.04:LTS
From an advisory covering 2 CVEs
 before 3.7.5-2ubuntu1~18.04.2+esm8, plus listed versions
3.7.0~a2-13.7.0~a3-13.7.0~a3-23.7.0~a3-33.7.0~a4-1
Show 17 moreShow less
3.7.0~b1-13.7.0~b1-1build13.7.0~b2-13.7.0~b3-13.7.0-1~18.043.7.1-1~18.043.7.3-2~18.04.13.7.5-2~18.043.7.5-2~18.04.43.7.5-2ubuntu1~18.04.23.7.5-2ubuntu1~18.04.2+esm13.7.5-2ubuntu1~18.04.2+esm23.7.5-2ubuntu1~18.04.2+esm33.7.5-2ubuntu1~18.04.2+esm43.7.5-2ubuntu1~18.04.2+esm53.7.5-2ubuntu1~18.04.2+esm63.7.5-2ubuntu1~18.04.2+esm7
3.7.5-2ubuntu1~18.04.2+esm8
python3.8
Ubuntu:Pro:18.04:LTS
From an advisory covering 2 CVEs
 before 3.8.0-3ubuntu1~18.04.2+esm7, plus listed versions
3.8.0-3~18.043.8.0-3~18.04.13.8.0-3ubuntu1~18.04.23.8.0-3ubuntu1~18.04.2+esm13.8.0-3ubuntu1~18.04.2+esm2
Show 4 moreShow less
3.8.0-3ubuntu1~18.04.2+esm33.8.0-3ubuntu1~18.04.2+esm43.8.0-3ubuntu1~18.04.2+esm53.8.0-3ubuntu1~18.04.2+esm6
3.8.0-3ubuntu1~18.04.2+esm7
python3.8
Ubuntu:Pro:20.04:LTS
From an advisory covering 2 CVEs
 before 3.8.10-0ubuntu1~20.04.18+esm3, plus listed versions
3.8.0-13.8.0-23.8.0-33.8.0-43.8.0-5
Show 29 moreShow less
3.8.1-2ubuntu33.8.2~rc1-1ubuntu13.8.2-13.8.2-1ubuntu13.8.2-1ubuntu1.13.8.2-1ubuntu1.23.8.5-1~20.043.8.5-1~20.04.23.8.5-1~20.04.33.8.10-0ubuntu1~20.043.8.10-0ubuntu1~20.04.13.8.10-0ubuntu1~20.04.23.8.10-0ubuntu1~20.04.43.8.10-0ubuntu1~20.04.53.8.10-0ubuntu1~20.04.63.8.10-0ubuntu1~20.04.73.8.10-0ubuntu1~20.04.83.8.10-0ubuntu1~20.04.93.8.10-0ubuntu1~20.04.103.8.10-0ubuntu1~20.04.113.8.10-0ubuntu1~20.04.123.8.10-0ubuntu1~20.04.133.8.10-0ubuntu1~20.04.143.8.10-0ubuntu1~20.04.153.8.10-0ubuntu1~20.04.163.8.10-0ubuntu1~20.04.173.8.10-0ubuntu1~20.04.183.8.10-0ubuntu1~20.04.18+esm13.8.10-0ubuntu1~20.04.18+esm2
3.8.10-0ubuntu1~20.04.18+esm3
python3.9
Ubuntu:Pro:20.04:LTS
From an advisory covering 2 CVEs
 before 3.9.5-3ubuntu0~20.04.1+esm7, plus listed versions
3.9.0~rc1-1~20.043.9.0-5~20.043.9.5-3~20.04.13.9.5-3ubuntu0~20.04.13.9.5-3ubuntu0~20.04.1+esm1
Show 5 moreShow less
3.9.5-3ubuntu0~20.04.1+esm23.9.5-3ubuntu0~20.04.1+esm33.9.5-3ubuntu0~20.04.1+esm43.9.5-3ubuntu0~20.04.1+esm53.9.5-3ubuntu0~20.04.1+esm6
3.9.5-3ubuntu0~20.04.1+esm7
python3.10
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 3.10.12-1~22.04.12, plus listed versions
3.10.0-23.10.0-33.10.0-43.10.0-53.10.0-5build1
Show 23 moreShow less
3.10.1-13.10.1-23.10.2-13.10.2-53.10.2-73.10.3-13.10.4-33.10.4-3ubuntu0.13.10.6-1~22.043.10.6-1~22.04.13.10.6-1~22.04.23.10.6-1~22.04.2ubuntu13.10.6-1~22.04.2ubuntu1.13.10.12-1~22.04.23.10.12-1~22.04.33.10.12-1~22.04.43.10.12-1~22.04.53.10.12-1~22.04.63.10.12-1~22.04.73.10.12-1~22.04.83.10.12-1~22.04.93.10.12-1~22.04.103.10.12-1~22.04.11
3.10.12-1~22.04.12
python3.11
Ubuntu:Pro:22.04:LTS
From an advisory covering 2 CVEs
 before 3.11.0~rc1-1~22.04.1~esm6, plus listed versions
3.11.0~rc1-1~22.043.11.0~rc1-1~22.04.1~esm13.11.0~rc1-1~22.04.1~esm23.11.0~rc1-1~22.04.1~esm33.11.0~rc1-1~22.04.1~esm43.11.0~rc1-1~22.04.1~esm5
3.11.0~rc1-1~22.04.1~esm6
python3.12
Ubuntu:24.04:LTS
From an advisory covering 2 CVEs
 before 3.12.3-1ubuntu0.9, plus listed versions
3.12.0-13.12.0-53.12.0-63.12.0-73.12.1-2
Show 13 moreShow less
3.12.2-13.12.2-4build33.12.2-4build43.12.2-5ubuntu33.12.3-13.12.3-1ubuntu0.13.12.3-1ubuntu0.23.12.3-1ubuntu0.33.12.3-1ubuntu0.43.12.3-1ubuntu0.53.12.3-1ubuntu0.63.12.3-1ubuntu0.73.12.3-1ubuntu0.8
3.12.3-1ubuntu0.9
python3.13
Ubuntu:25.10
From an advisory covering 2 CVEs
 before 3.13.7-1ubuntu0.1, plus listed versions
3.13.3-13.13.3-23.13.3-43.13.4-13.13.5-13.13.5-23.13.6-13.13.7-1
3.13.7-1ubuntu0.1
python315
openSUSE:Tumbleweed
From an advisory covering 39 CVEs
 before 3.15.0~a1-1.1
3.15.0~a1-1.1
python312
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 3.12.12-2.1
3.12.12-2.1
python314
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 3.14.0-3.1
3.14.0-3.1
python313
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 3.13.9-2.1
3.13.9-2.1
python311
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 3.11.14-2.1
3.11.14-2.1
python310
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 3.10.19-2.1
3.10.19-2.1
python39
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 3.9.24-2.1
3.9.24-2.1
python313
openSUSE:Leap 16.0
From an advisory covering 7 CVEs
 before 3.13.11-160000.1.1
3.13.11-160000.1.1
python313-core
openSUSE:Leap 16.0
From an advisory covering 7 CVEs
 before 3.13.11-160000.1.1
3.13.11-160000.1.1
python313-documentation
openSUSE:Leap 16.0
From an advisory covering 7 CVEs
 before 3.13.11-160000.1.1
3.13.11-160000.1.1
python313-nogil
openSUSE:Leap 16.0
From an advisory covering 7 CVEs
 before 3.13.11-160000.1.1
3.13.11-160000.1.1
python313-nogil-nogil-core
openSUSE:Leap 16.0
From an advisory covering 7 CVEs
 before 3.13.11-160000.1.1
3.13.11-160000.1.1

History

History
RecordedChangedSources
affected
factsOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-8291 is a medium vulnerability (CVSS 4.3) in Python Software Foundation Cpython, published October 7, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 40th percentile. Fixed in python3.12 3.12.12-1.el9_7.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 279 package rows and 179 references. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 23 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open