Every CVE Search/ Get API key

CVE-2023-6597

An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...

7.8 HighFix available

An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.

The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

0.31%Up 0.3 points since Mar 20, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.8

An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.

The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

Record
CVE-2023-6597
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
EUVDEUVD-2023-58821 7.8

An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.

The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

Record
EUVD-2023-58821
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-797f-63wg-8chv 7.8

An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...

An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.2, 3.11.8, 3.10.13, 3.9.18, and 3.8.18 and prior.

The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

Record
GHSA-797f-63wg-8chv
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
NVD 7.8

An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.

The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

Record
CVE-2023-6597
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVALPINE-CVE-2023-6597 7.8

An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.

The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

Record
ALPINE-CVE-2023-6597
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVBELL-CVE-2023-6597 7.8
Record
BELL-CVE-2023-6597
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
Show 45 moreShow less
OSV 7.8

An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.

The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

Record
CVE-2023-6597
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-04
OSVDEBIAN-CVE-2023-6597 7.8

An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

Record
DEBIAN-CVE-2023-6597
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVOESA-2024-2190 7.8

python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.

Security Fix(es):

An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.

The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances. (CVE-2023-6597)

An issue was found in the CPython zipfile module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.

The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive.

(CVE-2024-0450)

There is a MEDIUM severity vulnerability affecting CPython.

The “socket” module provides a pure-Python fallback to the socket.socketpair() function for platforms that don’t support AF_UNIX, such as Windows. This pure-Python implementation uses AF_INET or AF_INET6 to create a local connected pair of sockets. The connection between the two sockets was not verified before passing the two sockets back to the user, which leaves the server socket vulnerable to a connection race from a malicious local peer.

Platforms that support AF_UNIX such as Linux and macOS are not affected by this vulnerability. Versions prior to CPython 3.5 are not affected due to the vulnerable API not being included.(CVE-2024-3219)

There is a MEDIUM severity vulnerability affecting CPython.

Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.(CVE-2024-6232)

Record
OESA-2024-2190
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVOESA-2024-2191 7.8

python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.

Security Fix(es):

An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.

The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances. (CVE-2023-6597)

An issue was found in the CPython zipfile module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.

The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive.

(CVE-2024-0450)

There is a MEDIUM severity vulnerability affecting CPython.

The “socket” module provides a pure-Python fallback to the socket.socketpair() function for platforms that don’t support AF_UNIX, such as Windows. This pure-Python implementation uses AF_INET or AF_INET6 to create a local connected pair of sockets. The connection between the two sockets was not verified before passing the two sockets back to the user, which leaves the server socket vulnerable to a connection race from a malicious local peer.

Platforms that support AF_UNIX such as Linux and macOS are not affected by this vulnerability. Versions prior to CPython 3.5 are not affected due to the vulnerable API not being included.(CVE-2024-3219)

There is a MEDIUM severity vulnerability affecting CPython.

Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.(CVE-2024-6232)

Record
OESA-2024-2191
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVOESA-2024-2192 7.8

python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.

Security Fix(es):

An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.

The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances. (CVE-2023-6597)

There is a MEDIUM severity vulnerability affecting CPython.

The “socket” module provides a pure-Python fallback to the socket.socketpair() function for platforms that don’t support AF_UNIX, such as Windows. This pure-Python implementation uses AF_INET or AF_INET6 to create a local connected pair of sockets. The connection between the two sockets was not verified before passing the two sockets back to the user, which leaves the server socket vulnerable to a connection race from a malicious local peer.

Platforms that support AF_UNIX such as Linux and macOS are not affected by this vulnerability. Versions prior to CPython 3.5 are not affected due to the vulnerable API not being included.(CVE-2024-3219)

There is a MEDIUM severity vulnerability affecting CPython.

Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.(CVE-2024-6232)

Record
OESA-2024-2192
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVOESA-2024-2193 7.8

python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.

Security Fix(es):

An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.

The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances. (CVE-2023-6597)

An issue was found in the CPython zipfile module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.

The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive.

(CVE-2024-0450)

There is a MEDIUM severity vulnerability affecting CPython.

The “socket” module provides a pure-Python fallback to the socket.socketpair() function for platforms that don’t support AF_UNIX, such as Windows. This pure-Python implementation uses AF_INET or AF_INET6 to create a local connected pair of sockets. The connection between the two sockets was not verified before passing the two sockets back to the user, which leaves the server socket vulnerable to a connection race from a malicious local peer.

Platforms that support AF_UNIX such as Linux and macOS are not affected by this vulnerability. Versions prior to CPython 3.5 are not affected due to the vulnerable API not being included.(CVE-2024-3219)

There is a MEDIUM severity vulnerability affecting CPython.

Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.(CVE-2024-6232)

Record
OESA-2024-2193
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2024:3347 7.8

Red Hat Security Advisory: python3 security update

Record
RHSA-2024:3347
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2024:3391 7.8

Red Hat Security Advisory: python3 security update

Record
RHSA-2024:3391
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2024:3466 7.8

Red Hat Security Advisory: python39:3.9 and python39-devel:3.9 security update

Record
RHSA-2024:3466
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2024:4058 7.8

Red Hat Security Advisory: python3.11 security update

Record
RHSA-2024:4058
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2024:4077 7.8

Red Hat Security Advisory: python3.11 security update

Record
RHSA-2024:4077
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2024:4078 7.8

Red Hat Security Advisory: python3.9 security update

Record
RHSA-2024:4078
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2024:4166 7.8

Red Hat Security Advisory: python3 security update

Record
RHSA-2024:4166
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2024:4370 7.8

Red Hat Security Advisory: python3 security update

Record
RHSA-2024:4370
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2024:4406 7.8

Red Hat Security Advisory: python3 security update

Record
RHSA-2024:4406
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2024:4456 7.8

Red Hat Security Advisory: python3 security update

Record
RHSA-2024:4456
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2024:4896 7.8

Red Hat Security Advisory: python3.11 security update

Record
RHSA-2024:4896
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2024:5535 7.8

Red Hat Security Advisory: python3.9 security update

Record
RHSA-2024:5535
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2024:5689 7.8

Red Hat Security Advisory: python3.9 security update

Record
RHSA-2024:5689
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2023-6597 7.8

An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

Record
UBUNTU-CVE-2023-6597
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVALSA-2024:3347 No score

Important: python3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)
  • python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:3347
Updated
2026-11-02
OSVALSA-2024:3466 No score

Important: python39:3.9 and python39-devel:3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • python39:3.9/python39: python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)
  • python39:3.9/python39: python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)
  • python39:3.9/python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() (CVE-2024-3651)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:3466
Updated
2026-11-02
OSVALSA-2024:4058 No score

Important: python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)
  • python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record
ALSA-2024:4058
Updated
2026-11-02
OSVALSA-2024:4077 No score

Important: python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record
ALSA-2024:4077
Updated
2026-11-02
OSVALSA-2024:4078 No score

Important: python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)
  • python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record
ALSA-2024:4078
Updated
2026-11-02
OSVAZL-35926 No score

CVE-2023-6597 affecting package python3 for versions less than 3.12.3-1

An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.

The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

Record
AZL-35926
Updated
2026-11-02
OSVAZL-35949 No score

CVE-2023-6597 affecting package python3 for versions less than 3.9.19-1

An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.

The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

Record
AZL-35949
Updated
2026-11-02
OSVBIT-libpython-2023-6597 No score

An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.

The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

Record
BIT-libpython-2023-6597
Updated
2026-11-02
OSVBIT-python-2023-6597 No score

An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.

The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

Record
BIT-python-2023-6597
Updated
2026-11-02
OSVBIT-python-min-2023-6597 No score

An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.

The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

Record
BIT-python-min-2023-6597
Updated
2026-11-02
OSVCLSA-2024-1720178532 No score

python3: Fix of 2 CVEs

  • CVE-2023-6597: Prevent tempfile.TemporaryDirectory class dereference symlinks
  • CVE-2024-0450: Make zipfile module reject zip archives which overlap entries in the archive. Prevent “quoted-overlap” zip-bombs exploit.
Record
CLSA-2024-1720178532
Updated
2026-11-02
OSVCLSA-2024-1720547879 No score

python3.9: Fix of CVE-2023-6597

  • CVE-2023-6597: prevent tempfile.TemporaryDirectory class dereference symlinks
  • Fix expat regression tests for xml_etree
Record
CLSA-2024-1720547879
Updated
2026-11-02
OSVCLSA-2024-1720548691 No score

python3: Fix of 2 CVEs

  • CVE-2023-6597: Prevent tempfile.TemporaryDirectory class dereference symlinks
  • CVE-2024-0450: Make zipfile module reject zip archives which overlap entries in the archive. Prevent “quoted-overlap” zip-bombs exploit.
Record
CLSA-2024-1720548691
Updated
2026-11-02
OSVCLSA-2024-1720548714 No score

python3: Fix of CVE-2023-6597

  • CVE-2023-6597: prevent tempfile.TemporaryDirectory class dereference symlinks
Record
CLSA-2024-1720548714
Updated
2026-11-02
OSVCLSA-2025-1740479778 No score

python3.11: Fix of CVE-2023-6597

  • CVE-2023-6597: fix symlink dereferencing in TemporaryDirectory cleanup process
Record
CLSA-2025-1740479778
Updated
2026-11-02
OSVCLSA-2025-1740645307 No score

Fix CVE(s): CVE-2023-6597

  • SECURITY UPDATE: Ability to modify permissions with privileged programs
    • debian/patches/CVE-2023-6597.patch: Prevent tempfile.TemporaryDirectory class dereference symlinks
    • CVE-2023-6597
Record
CLSA-2025-1740645307
Updated
2026-11-02
OSVCLSA-2025-1740645424 No score

Fix CVE(s): CVE-2023-6597

  • SECURITY UPDATE: Ability to modify permissions with privileged programs
    • debian/patches/CVE-2023-6597.patch: Prevent tempfile.TemporaryDirectory class dereference symlinks
    • CVE-2023-6597
Record
CLSA-2025-1740645424
Updated
2026-11-02
OSVMGASA-2024-0096 No score

Updated python3, python packages fix security vulnerabilities

The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances. (CVE-2023-6597) The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive. (CVE-2024-0450)

Record
MGASA-2024-0096
Updated
2026-11-02
OSVopenSUSE-SU-2024:13736-1 No score

python38-3.8.18-5.1 on GA media

These are all security issues fixed in the python38-3.8.18-5.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13736-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13739-1 No score

python310-3.10.13-5.1 on GA media

These are all security issues fixed in the python310-3.10.13-5.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13739-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13740-1 No score

python311-3.11.8-3.1 on GA media

These are all security issues fixed in the python311-3.11.8-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13740-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13741-1 No score

python39-3.9.18-5.1 on GA media

These are all security issues fixed in the python39-3.9.18-5.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13741-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13744-1 No score

python312-3.12.2-4.1 on GA media

These are all security issues fixed in the python312-3.12.2-4.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13744-1
Updated
2026-11-02
OSVPSF-2024-1 No score

An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.

The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

Record
PSF-2024-1
Updated
2026-11-02
OSVRLSA-2024:3347 No score

Important: python3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)

  • python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:3347
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
python3
Alpine:v3.16
 before 3.10.14-r0
3.10.14-r0
python3
Alpine:v3.17
 before 3.10.14-r0
3.10.14-r0
platform-python
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.6.8-62.el8_10.alma.1
3.6.8-62.el8_10.alma.1
platform-python-debug
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.6.8-62.el8_10.alma.1
3.6.8-62.el8_10.alma.1
platform-python-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.6.8-62.el8_10.alma.1
3.6.8-62.el8_10.alma.1
python3-idle
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.6.8-62.el8_10.alma.1
3.6.8-62.el8_10.alma.1
python3-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.6.8-62.el8_10.alma.1
3.6.8-62.el8_10.alma.1
python3-test
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.6.8-62.el8_10.alma.1
3.6.8-62.el8_10.alma.1
python3-tkinter
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.6.8-62.el8_10.alma.1
3.6.8-62.el8_10.alma.1
python39
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.9.19-1.module_el8.10.0+3849+a48d89aa
3.9.19-1.module_el8.10.0+3849+a48d89aa
Show 290 moreShow less
Affected packages
PackageAffectedFixed
python39-Cython
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.29.21-5.module_el8.6.0+2780+a40f65e1
0.29.21-5.module_el8.6.0+2780+a40f65e1
python39-Cython
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.29.21-5.module_el8.6.0+3248+c431e88c
0.29.21-5.module_el8.6.0+3248+c431e88c
python39-PyMySQL
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.10.1-2.module_el8.6.0+2780+a40f65e1
0.10.1-2.module_el8.6.0+2780+a40f65e1
python39-attrs
AlmaLinux:8
From an advisory covering 3 CVEs
 before 20.3.0-2.module_el8.6.0+2780+a40f65e1
20.3.0-2.module_el8.6.0+2780+a40f65e1
python39-cffi
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.14.3-2.module_el8.6.0+2780+a40f65e1
1.14.3-2.module_el8.6.0+2780+a40f65e1
python39-cffi
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.14.3-2.module_el8.6.0+3248+c431e88c
1.14.3-2.module_el8.6.0+3248+c431e88c
python39-chardet
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.0.4-19.module_el8.6.0+2780+a40f65e1
3.0.4-19.module_el8.6.0+2780+a40f65e1
python39-cryptography
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.3.1-3.module_el8.10.0+3765+2f9a457d
3.3.1-3.module_el8.10.0+3765+2f9a457d
python39-debug
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.9.19-1.module_el8.10.0+3849+a48d89aa
3.9.19-1.module_el8.10.0+3849+a48d89aa
python39-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.9.19-1.module_el8.10.0+3849+a48d89aa
3.9.19-1.module_el8.10.0+3849+a48d89aa
python39-idle
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.9.19-1.module_el8.10.0+3849+a48d89aa
3.9.19-1.module_el8.10.0+3849+a48d89aa
python39-idna
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.10-4.module_el8.10.0+3849+a48d89aa
2.10-4.module_el8.10.0+3849+a48d89aa
python39-iniconfig
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.1.1-2.module_el8.6.0+2780+a40f65e1
1.1.1-2.module_el8.6.0+2780+a40f65e1
python39-libs
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.9.19-1.module_el8.10.0+3849+a48d89aa
3.9.19-1.module_el8.10.0+3849+a48d89aa
python39-lxml
AlmaLinux:8
From an advisory covering 3 CVEs
 before 4.6.5-1.module_el8.6.0+2780+a40f65e1
4.6.5-1.module_el8.6.0+2780+a40f65e1
python39-lxml
AlmaLinux:8
From an advisory covering 3 CVEs
 before 4.6.5-1.module_el8.6.0+3248+c431e88c
4.6.5-1.module_el8.6.0+3248+c431e88c
python39-mod_wsgi
AlmaLinux:8
From an advisory covering 3 CVEs
 before 4.7.1-7.module_el8.9.0+3634+fb2a896c
4.7.1-7.module_el8.9.0+3634+fb2a896c
python39-more-itertools
AlmaLinux:8
From an advisory covering 3 CVEs
 before 8.5.0-2.module_el8.6.0+2780+a40f65e1
8.5.0-2.module_el8.6.0+2780+a40f65e1
python39-numpy
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.19.4-3.module_el8.6.0+2780+a40f65e1
1.19.4-3.module_el8.6.0+2780+a40f65e1
python39-numpy
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.19.4-3.module_el8.6.0+3248+c431e88c
1.19.4-3.module_el8.6.0+3248+c431e88c
python39-numpy-doc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.19.4-3.module_el8.6.0+2780+a40f65e1
1.19.4-3.module_el8.6.0+2780+a40f65e1
python39-numpy-f2py
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.19.4-3.module_el8.6.0+2780+a40f65e1
1.19.4-3.module_el8.6.0+2780+a40f65e1
python39-numpy-f2py
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.19.4-3.module_el8.6.0+3248+c431e88c
1.19.4-3.module_el8.6.0+3248+c431e88c
python39-packaging
AlmaLinux:8
From an advisory covering 3 CVEs
 before 20.4-4.module_el8.6.0+2780+a40f65e1
20.4-4.module_el8.6.0+2780+a40f65e1
python39-pip
AlmaLinux:8
From an advisory covering 3 CVEs
 before 20.2.4-9.module_el8.10.0+3765+2f9a457d
20.2.4-9.module_el8.10.0+3765+2f9a457d
python39-pip-wheel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 20.2.4-9.module_el8.10.0+3765+2f9a457d
20.2.4-9.module_el8.10.0+3765+2f9a457d
python39-pluggy
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.13.1-3.module_el8.6.0+2780+a40f65e1
0.13.1-3.module_el8.6.0+2780+a40f65e1
python39-ply
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.11-10.module_el8.6.0+2780+a40f65e1
3.11-10.module_el8.6.0+2780+a40f65e1
python39-psutil
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.8.0-4.module_el8.6.0+2780+a40f65e1
5.8.0-4.module_el8.6.0+2780+a40f65e1
python39-psutil
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.8.0-4.module_el8.6.0+3248+c431e88c
5.8.0-4.module_el8.6.0+3248+c431e88c
python39-psycopg2
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.8.6-3.module_el8.10.0+3765+2f9a457d
2.8.6-3.module_el8.10.0+3765+2f9a457d
python39-psycopg2-doc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.8.6-3.module_el8.10.0+3765+2f9a457d
2.8.6-3.module_el8.10.0+3765+2f9a457d
python39-psycopg2-tests
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.8.6-3.module_el8.10.0+3765+2f9a457d
2.8.6-3.module_el8.10.0+3765+2f9a457d
python39-py
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.10.0-1.module_el8.6.0+2780+a40f65e1
1.10.0-1.module_el8.6.0+2780+a40f65e1
python39-pybind11
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.7.1-1.module_el8.6.0+2780+a40f65e1
2.7.1-1.module_el8.6.0+2780+a40f65e1
python39-pybind11
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.7.1-1.module_el8.6.0+3248+c431e88c
2.7.1-1.module_el8.6.0+3248+c431e88c
python39-pybind11-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.7.1-1.module_el8.6.0+3248+c431e88c
2.7.1-1.module_el8.6.0+3248+c431e88c
python39-pybind11-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.7.1-1.module_el8.6.0+2780+a40f65e1
2.7.1-1.module_el8.6.0+2780+a40f65e1
python39-pycparser
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.20-3.module_el8.6.0+2780+a40f65e1
2.20-3.module_el8.6.0+2780+a40f65e1
python39-pyparsing
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.4.7-5.module_el8.6.0+2780+a40f65e1
2.4.7-5.module_el8.6.0+2780+a40f65e1
python39-pysocks
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.7.1-4.module_el8.6.0+2780+a40f65e1
1.7.1-4.module_el8.6.0+2780+a40f65e1
python39-pytest
AlmaLinux:8
From an advisory covering 3 CVEs
 before 6.0.2-2.module_el8.6.0+2780+a40f65e1
6.0.2-2.module_el8.6.0+2780+a40f65e1
python39-pyyaml
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.4.1-1.module_el8.6.0+2780+a40f65e1
5.4.1-1.module_el8.6.0+2780+a40f65e1
python39-pyyaml
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.4.1-1.module_el8.6.0+3248+c431e88c
5.4.1-1.module_el8.6.0+3248+c431e88c
python39-requests
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.25.0-3.module_el8.9.0+3634+fb2a896c
2.25.0-3.module_el8.9.0+3634+fb2a896c
python39-rpm-macros
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.9.19-1.module_el8.10.0+3849+a48d89aa
3.9.19-1.module_el8.10.0+3849+a48d89aa
python39-scipy
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.5.4-5.module_el8.9.0+3634+fb2a896c
1.5.4-5.module_el8.9.0+3634+fb2a896c
python39-setuptools
AlmaLinux:8
From an advisory covering 3 CVEs
 before 50.3.2-5.module_el8.10.0+3765+2f9a457d
50.3.2-5.module_el8.10.0+3765+2f9a457d
python39-setuptools-wheel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 50.3.2-5.module_el8.10.0+3765+2f9a457d
50.3.2-5.module_el8.10.0+3765+2f9a457d
python3
Azure Linux:3
 before 3.12.3-1
3.12.3-1
python3
Azure Linux:2
 before 3.9.19-1
3.9.19-1
python3
Alpaquita:23
 3.11.3-r0 up to 3.11.8-r0
3.11.8-r0
python3
Alpaquita:stream
 3.11.4-r0 up to 3.12.3-r0
3.12.3-r0
python3
BellSoft Hardened Containers:23
 3.11.3-r0 up to 3.11.8-r0
3.11.8-r0
python3
BellSoft Hardened Containers:stream
 3.11.4-r0 up to 3.12.3-r0
3.12.3-r0
libpython
Bitnami
 before 3.8.19, 3.9.0 up to 3.9.19, 3.10.0 up to 3.10.14, 3.11.0 up to 3.11.8, 3.12.0 up to 3.12.1
3.8.193.9.193.10.143.11.83.12.1
python
Bitnami
 before 3.8.19, 3.9.0 up to 3.9.19, 3.10.0 up to 3.10.14, 3.11.0 up to 3.11.8, 3.12.0 up to 3.12.1
3.8.193.9.193.10.143.11.83.12.1
python-min
Bitnami
 before 3.8.19, 3.9.0 up to 3.9.19, 3.10.0 up to 3.10.14, 3.11.0 up to 3.11.8, 3.12.0 up to 3.12.1
3.8.193.9.193.10.143.11.83.12.1
platform-python
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 3.6.8-40.el8_4.tuxcare.els6
3.6.8-40.el8_4.tuxcare.els6
platform-python-debug
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 3.6.8-40.el8_4.tuxcare.els6
3.6.8-40.el8_4.tuxcare.els6
platform-python-devel
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 3.6.8-40.el8_4.tuxcare.els6
3.6.8-40.el8_4.tuxcare.els6
python3-devel
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 3.6.8-40.el8_4.tuxcare.els6
3.6.8-40.el8_4.tuxcare.els6
python3-idle
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 3.6.8-40.el8_4.tuxcare.els6
3.6.8-40.el8_4.tuxcare.els6
python3-libs
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 3.6.8-40.el8_4.tuxcare.els6
3.6.8-40.el8_4.tuxcare.els6
python3-test
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 3.6.8-40.el8_4.tuxcare.els6
3.6.8-40.el8_4.tuxcare.els6
python3-tkinter
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 3.6.8-40.el8_4.tuxcare.els6
3.6.8-40.el8_4.tuxcare.els6
python-unversioned-command
TuxCare:AlmaLinux:9.2
 before 3.9.16-1.el9_2.2.tuxcare.els3
3.9.16-1.el9_2.2.tuxcare.els3
python3
TuxCare:AlmaLinux:9.2
 before 3.9.16-1.el9_2.2.tuxcare.els3
3.9.16-1.el9_2.2.tuxcare.els3
python3-debug
TuxCare:AlmaLinux:9.2
 before 3.9.16-1.el9_2.2.tuxcare.els3
3.9.16-1.el9_2.2.tuxcare.els3
python3-devel
TuxCare:AlmaLinux:9.2
 before 3.9.16-1.el9_2.2.tuxcare.els3
3.9.16-1.el9_2.2.tuxcare.els3
python3-idle
TuxCare:AlmaLinux:9.2
 before 3.9.16-1.el9_2.2.tuxcare.els3
3.9.16-1.el9_2.2.tuxcare.els3
python3-libs
TuxCare:AlmaLinux:9.2
 before 3.9.16-1.el9_2.2.tuxcare.els3
3.9.16-1.el9_2.2.tuxcare.els3
python3-test
TuxCare:AlmaLinux:9.2
 before 3.9.16-1.el9_2.2.tuxcare.els3
3.9.16-1.el9_2.2.tuxcare.els3
python3-tkinter
TuxCare:AlmaLinux:9.2
 before 3.9.16-1.el9_2.2.tuxcare.els3
3.9.16-1.el9_2.2.tuxcare.els3
platform-python
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 3.6.8-42.el8.tuxcare.els6
3.6.8-42.el8.tuxcare.els6
platform-python-debug
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 3.6.8-42.el8.tuxcare.els6
3.6.8-42.el8.tuxcare.els6
platform-python-devel
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 3.6.8-42.el8.tuxcare.els6
3.6.8-42.el8.tuxcare.els6
python3-devel
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 3.6.8-42.el8.tuxcare.els6
3.6.8-42.el8.tuxcare.els6
python3-idle
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 3.6.8-42.el8.tuxcare.els6
3.6.8-42.el8.tuxcare.els6
python3-libs
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 3.6.8-42.el8.tuxcare.els6
3.6.8-42.el8.tuxcare.els6
python3-test
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 3.6.8-42.el8.tuxcare.els6
3.6.8-42.el8.tuxcare.els6
python3-tkinter
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 3.6.8-42.el8.tuxcare.els6
3.6.8-42.el8.tuxcare.els6
python3
TuxCare:CentOS:7
 before 3.6.8-21.el7_9.tuxcare.els3
3.6.8-21.el7_9.tuxcare.els3
python3-debug
TuxCare:CentOS:7
 before 3.6.8-21.el7_9.tuxcare.els3
3.6.8-21.el7_9.tuxcare.els3
python3-devel
TuxCare:CentOS:7
 before 3.6.8-21.el7_9.tuxcare.els3
3.6.8-21.el7_9.tuxcare.els3
python3-idle
TuxCare:CentOS:7
 before 3.6.8-21.el7_9.tuxcare.els3
3.6.8-21.el7_9.tuxcare.els3
python3-libs
TuxCare:CentOS:7
 before 3.6.8-21.el7_9.tuxcare.els3
3.6.8-21.el7_9.tuxcare.els3
python3-test
TuxCare:CentOS:7
 before 3.6.8-21.el7_9.tuxcare.els3
3.6.8-21.el7_9.tuxcare.els3
python3-tkinter
TuxCare:CentOS:7
 before 3.6.8-21.el7_9.tuxcare.els3
3.6.8-21.el7_9.tuxcare.els3
python3.11
TuxCare:AlmaLinux:9.2
 before 3.11.2-2.el9_2.2.tuxcare.els6
3.11.2-2.el9_2.2.tuxcare.els6
python3.11-debug
TuxCare:AlmaLinux:9.2
 before 3.11.2-2.el9_2.2.tuxcare.els6
3.11.2-2.el9_2.2.tuxcare.els6
python3.11-devel
TuxCare:AlmaLinux:9.2
 before 3.11.2-2.el9_2.2.tuxcare.els6
3.11.2-2.el9_2.2.tuxcare.els6
python3.11-idle
TuxCare:AlmaLinux:9.2
 before 3.11.2-2.el9_2.2.tuxcare.els6
3.11.2-2.el9_2.2.tuxcare.els6
python3.11-libs
TuxCare:AlmaLinux:9.2
 before 3.11.2-2.el9_2.2.tuxcare.els6
3.11.2-2.el9_2.2.tuxcare.els6
python3.11-test
TuxCare:AlmaLinux:9.2
 before 3.11.2-2.el9_2.2.tuxcare.els6
3.11.2-2.el9_2.2.tuxcare.els6
python3.11-tkinter
TuxCare:AlmaLinux:9.2
 before 3.11.2-2.el9_2.2.tuxcare.els6
3.11.2-2.el9_2.2.tuxcare.els6
idle-python3.5
TuxCare:Ubuntu:16.04
 before 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
libpython3.5
TuxCare:Ubuntu:16.04
 before 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
libpython3.5-dev
TuxCare:Ubuntu:16.04
 before 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
libpython3.5-minimal
TuxCare:Ubuntu:16.04
 before 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
libpython3.5-stdlib
TuxCare:Ubuntu:16.04
 before 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
libpython3.5-testsuite
TuxCare:Ubuntu:16.04
 before 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
python3.5
TuxCare:Ubuntu:16.04
 before 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
python3.5-dev
TuxCare:Ubuntu:16.04
 before 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
python3.5-doc
TuxCare:Ubuntu:16.04
 before 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
python3.5-examples
TuxCare:Ubuntu:16.04
 before 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
python3.5-minimal
TuxCare:Ubuntu:16.04
 before 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
python3.5-venv
TuxCare:Ubuntu:16.04
 before 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17
idle-python3.6
TuxCare:Ubuntu:18.04
 before 3.6.9-1~18.04ubuntu1.12+tuxcare.els11
3.6.9-1~18.04ubuntu1.12+tuxcare.els11
libpython3.6
TuxCare:Ubuntu:18.04
 before 3.6.9-1~18.04ubuntu1.12+tuxcare.els11
3.6.9-1~18.04ubuntu1.12+tuxcare.els11
libpython3.6-dev
TuxCare:Ubuntu:18.04
 before 3.6.9-1~18.04ubuntu1.12+tuxcare.els11
3.6.9-1~18.04ubuntu1.12+tuxcare.els11
libpython3.6-minimal
TuxCare:Ubuntu:18.04
 before 3.6.9-1~18.04ubuntu1.12+tuxcare.els11
3.6.9-1~18.04ubuntu1.12+tuxcare.els11
libpython3.6-stdlib
TuxCare:Ubuntu:18.04
 before 3.6.9-1~18.04ubuntu1.12+tuxcare.els11
3.6.9-1~18.04ubuntu1.12+tuxcare.els11
libpython3.6-testsuite
TuxCare:Ubuntu:18.04
 before 3.6.9-1~18.04ubuntu1.12+tuxcare.els11
3.6.9-1~18.04ubuntu1.12+tuxcare.els11
python3.6
TuxCare:Ubuntu:18.04
 before 3.6.9-1~18.04ubuntu1.12+tuxcare.els11
3.6.9-1~18.04ubuntu1.12+tuxcare.els11
pypy3
Debian:12
 before 7.3.11+dfsg-2+deb12u2, plus listed versions
7.3.11+dfsg-27.3.11+dfsg-2+deb12u1
7.3.11+dfsg-2+deb12u2
pypy3
Debian:13
 before 7.3.13+dfsg-1
7.3.13+dfsg-1
pypy3
Debian:14
 before 7.3.13+dfsg-1
7.3.13+dfsg-1
python3.11
Debian:12
 before 3.11.2-6+deb12u2, plus listed versions
3.11.2-63.11.2-6+deb12u1
3.11.2-6+deb12u2
python3.7
Debian:10
From an advisory covering 2 CVEs
 before 3.7.3-2+deb10u7, plus listed versions
3.7.3-23.7.3-2+deb10u13.7.3-2+deb10u23.7.3-2+deb10u33.7.3-2+deb10u43.7.3-2+deb10u53.7.3-2+deb10u6
3.7.3-2+deb10u7
pypy3
Debian:11
From an advisory covering 4 CVEs
 before 7.3.5+dfsg-2+deb11u3, plus listed versions
7.3.5+dfsg-27.3.5+dfsg-2+deb11u17.3.5+dfsg-2+deb11u2
7.3.5+dfsg-2+deb11u3
python3.9
Debian:11
From an advisory covering 23 CVEs
 before 3.9.2-1+deb11u2, plus listed versions
3.9.2-13.9.2-1+deb11u1
3.9.2-1+deb11u2
python3
Mageia:9
From an advisory covering 2 CVEs
 before 3.10.11-1.2.mga9
3.10.11-1.2.mga9
python
Mageia:9
From an advisory covering 2 CVEs
 before 2.7.18-15.2.mga9
2.7.18-15.2.mga9
python3
openEuler:22.03-LTS-SP4
From an advisory covering 4 CVEs
 before 3.9.9-36.oe2203sp4
3.9.9-36.oe2203sp4
python3
openEuler:22.03-LTS-SP3
From an advisory covering 4 CVEs
 before 3.9.9-31.oe2203sp3
3.9.9-31.oe2203sp3
python3
openEuler:22.03-LTS-SP1
From an advisory covering 3 CVEs
 before 3.9.9-32.oe2203sp1
3.9.9-32.oe2203sp1
python3
openEuler:24.03-LTS
From an advisory covering 4 CVEs
 before 3.11.6-6.oe2403
3.11.6-6.oe2403
platform-python
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.6.8-62.el8_10
0:3.6.8-62.el8_10
platform-python-debug
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.6.8-62.el8_10
0:3.6.8-62.el8_10
platform-python-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.6.8-62.el8_10
0:3.6.8-62.el8_10
python3-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.6.8-62.el8_10
0:3.6.8-62.el8_10
python3-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.6.8-62.el8_10
0:3.6.8-62.el8_10
python3-idle
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.6.8-62.el8_10
0:3.6.8-62.el8_10
python3-test
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.6.8-62.el8_10
0:3.6.8-62.el8_10
python3-tkinter
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.6.8-62.el8_10
0:3.6.8-62.el8_10
platform-python
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:3.6.8-62.el8_10
0:3.6.8-62.el8_10
python3
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:3.6.8-62.el8_10
0:3.6.8-62.el8_10
python3-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:3.6.8-62.el8_10
0:3.6.8-62.el8_10
python3-debugsource
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:3.6.8-62.el8_10
0:3.6.8-62.el8_10
python3-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:3.6.8-62.el8_10
0:3.6.8-62.el8_10
python3-test
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:3.6.8-62.el8_10
0:3.6.8-62.el8_10
platform-python
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:3.6.8-51.el8_8.6
0:3.6.8-51.el8_8.6
platform-python-debug
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:3.6.8-51.el8_8.6
0:3.6.8-51.el8_8.6
platform-python-devel
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:3.6.8-51.el8_8.6
0:3.6.8-51.el8_8.6
python3-debuginfo
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:3.6.8-51.el8_8.6
0:3.6.8-51.el8_8.6
python3-debugsource
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:3.6.8-51.el8_8.6
0:3.6.8-51.el8_8.6
python3-idle
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:3.6.8-51.el8_8.6
0:3.6.8-51.el8_8.6
python3-test
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:3.6.8-51.el8_8.6
0:3.6.8-51.el8_8.6
python3-tkinter
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:3.6.8-51.el8_8.6
0:3.6.8-51.el8_8.6
platform-python
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 2 CVEs
 before 0:3.6.8-51.el8_8.6
0:3.6.8-51.el8_8.6
python3
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 2 CVEs
 before 0:3.6.8-51.el8_8.6
0:3.6.8-51.el8_8.6
python3-debuginfo
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 2 CVEs
 before 0:3.6.8-51.el8_8.6
0:3.6.8-51.el8_8.6
python3-debugsource
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 2 CVEs
 before 0:3.6.8-51.el8_8.6
0:3.6.8-51.el8_8.6
python3-libs
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 2 CVEs
 before 0:3.6.8-51.el8_8.6
0:3.6.8-51.el8_8.6
python3-test
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 2 CVEs
 before 0:3.6.8-51.el8_8.6
0:3.6.8-51.el8_8.6
PyYAML
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.4.1-1.module+el8.9.0+19644+d68f775d
0:5.4.1-1.module+el8.9.0+19644+d68f775d
PyYAML-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.4.1-1.module+el8.9.0+19644+d68f775d
0:5.4.1-1.module+el8.9.0+19644+d68f775d
mod_wsgi
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:4.7.1-7.module+el8.9.0+19644+d68f775d
0:4.7.1-7.module+el8.9.0+19644+d68f775d
numpy
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.19.4-3.module+el8.9.0+19644+d68f775d
0:1.19.4-3.module+el8.9.0+19644+d68f775d
numpy-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.19.4-3.module+el8.9.0+19644+d68f775d
0:1.19.4-3.module+el8.9.0+19644+d68f775d
python-PyMySQL
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.10.1-2.module+el8.9.0+19644+d68f775d
0:0.10.1-2.module+el8.9.0+19644+d68f775d
python-cffi
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.14.3-2.module+el8.9.0+19644+d68f775d
0:1.14.3-2.module+el8.9.0+19644+d68f775d
python-cffi-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.14.3-2.module+el8.9.0+19644+d68f775d
0:1.14.3-2.module+el8.9.0+19644+d68f775d
python-chardet
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.4-19.module+el8.9.0+19644+d68f775d
0:3.0.4-19.module+el8.9.0+19644+d68f775d
python-cryptography
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.3.1-3.module+el8.10.0+21271+eccd1d86
0:3.3.1-3.module+el8.10.0+21271+eccd1d86
python-cryptography-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.3.1-3.module+el8.10.0+21271+eccd1d86
0:3.3.1-3.module+el8.10.0+21271+eccd1d86
python-idna
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.10-4.module+el8.10.0+21815+bb024982
0:2.10-4.module+el8.10.0+21815+bb024982
python-lxml
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:4.6.5-1.module+el8.9.0+19644+d68f775d
0:4.6.5-1.module+el8.9.0+19644+d68f775d
python-lxml-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:4.6.5-1.module+el8.9.0+19644+d68f775d
0:4.6.5-1.module+el8.9.0+19644+d68f775d
python-ply
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.11-10.module+el8.9.0+19644+d68f775d
0:3.11-10.module+el8.9.0+19644+d68f775d
python-psutil
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.8.0-4.module+el8.9.0+19644+d68f775d
0:5.8.0-4.module+el8.9.0+19644+d68f775d
python-psutil-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.8.0-4.module+el8.9.0+19644+d68f775d
0:5.8.0-4.module+el8.9.0+19644+d68f775d
python-psycopg2
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.8.6-3.module+el8.10.0+21142+453d2b75
0:2.8.6-3.module+el8.10.0+21142+453d2b75
python-psycopg2-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.8.6-3.module+el8.10.0+21142+453d2b75
0:2.8.6-3.module+el8.10.0+21142+453d2b75
python-pycparser
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.20-3.module+el8.9.0+19644+d68f775d
0:2.20-3.module+el8.9.0+19644+d68f775d
python-pysocks
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.7.1-4.module+el8.9.0+19644+d68f775d
0:1.7.1-4.module+el8.9.0+19644+d68f775d
python-requests
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.25.0-3.module+el8.9.0+19644+d68f775d
0:2.25.0-3.module+el8.9.0+19644+d68f775d
python-toml
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.10.1-5.module+el8.9.0+19644+d68f775d
0:0.10.1-5.module+el8.9.0+19644+d68f775d
python-urllib3
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.25.10-5.module+el8.10.0+20443+f0a692fe
0:1.25.10-5.module+el8.10.0+20443+f0a692fe
python-wheel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 1:0.35.1-4.module+el8.9.0+19644+d68f775d
1:0.35.1-4.module+el8.9.0+19644+d68f775d
python39
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.9.19-1.module+el8.10.0+21815+bb024982
0:3.9.19-1.module+el8.10.0+21815+bb024982
python39-PyMySQL
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.10.1-2.module+el8.9.0+19644+d68f775d
0:0.10.1-2.module+el8.9.0+19644+d68f775d
python39-cffi
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.14.3-2.module+el8.9.0+19644+d68f775d
0:1.14.3-2.module+el8.9.0+19644+d68f775d
python3
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.6.8-62.el8_10.rocky.0
0:3.6.8-62.el8_10.rocky.0
python3.11
Rocky Linux:9
 before 0:3.11.7-1.el9_4.1
0:3.11.7-1.el9_4.1
python3.9
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:3.9.18-3.el9_4.1
0:3.9.18-3.el9_4.1
python311
SUSE:Linux Enterprise Module for Python 3 15 SP5
From an advisory covering 3 CVEs
 before 3.11.8-150400.9.23.1
3.11.8-150400.9.23.1
python311-core
SUSE:Linux Enterprise Module for Python 3 15 SP5
From an advisory covering 3 CVEs
 before 3.11.8-150400.9.23.1
3.11.8-150400.9.23.1
python311-documentation
SUSE:Linux Enterprise Module for Python 3 15 SP5
From an advisory covering 3 CVEs
 before 3.11.8-150400.9.23.1
3.11.8-150400.9.23.1
python311
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 3 CVEs
 before 3.11.8-150400.9.23.1
3.11.8-150400.9.23.1
python311-core
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 3 CVEs
 before 3.11.8-150400.9.23.1
3.11.8-150400.9.23.1
python311-documentation
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 3 CVEs
 before 3.11.8-150400.9.23.1
3.11.8-150400.9.23.1
python311
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 3.11.8-150400.9.23.1
3.11.8-150400.9.23.1
python311-core
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 3.11.8-150400.9.23.1
3.11.8-150400.9.23.1
python311-documentation
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 3.11.8-150400.9.23.1
3.11.8-150400.9.23.1
python311
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 3.11.8-150400.9.23.1
3.11.8-150400.9.23.1
python311-core
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 3.11.8-150400.9.23.1
3.11.8-150400.9.23.1
python311-documentation
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 3.11.8-150400.9.23.1
3.11.8-150400.9.23.1
python311
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 3 CVEs
 before 3.11.8-150400.9.23.1
3.11.8-150400.9.23.1
python311-core
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 3 CVEs
 before 3.11.8-150400.9.23.1
3.11.8-150400.9.23.1
python311-documentation
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 3 CVEs
 before 3.11.8-150400.9.23.1
3.11.8-150400.9.23.1
python311
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 3.11.8-150400.9.23.1
3.11.8-150400.9.23.1
python311-core
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 3.11.8-150400.9.23.1
3.11.8-150400.9.23.1
python311-documentation
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 3.11.8-150400.9.23.1
3.11.8-150400.9.23.1
python311
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 3 CVEs
 before 3.11.8-150400.9.23.1
3.11.8-150400.9.23.1
python311-core
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 3 CVEs
 before 3.11.8-150400.9.23.1
3.11.8-150400.9.23.1
python39
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 4 CVEs
 before 3.9.18-150300.4.38.1
3.9.18-150300.4.38.1
python39-core
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 4 CVEs
 before 3.9.18-150300.4.38.1
3.9.18-150300.4.38.1
python39
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 4 CVEs
 before 3.9.18-150300.4.38.1
3.9.18-150300.4.38.1
python39-core
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 4 CVEs
 before 3.9.18-150300.4.38.1
3.9.18-150300.4.38.1
python39
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 4 CVEs
 before 3.9.18-150300.4.38.1
3.9.18-150300.4.38.1
python39-core
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 4 CVEs
 before 3.9.18-150300.4.38.1
3.9.18-150300.4.38.1
python39
SUSE:Enterprise Storage 7.1
From an advisory covering 4 CVEs
 before 3.9.18-150300.4.38.1
3.9.18-150300.4.38.1
python39-core
SUSE:Enterprise Storage 7.1
From an advisory covering 4 CVEs
 before 3.9.18-150300.4.38.1
3.9.18-150300.4.38.1
python39
openSUSE:Leap 15.5
From an advisory covering 4 CVEs
 before 3.9.18-150300.4.38.1
3.9.18-150300.4.38.1
python39-core
openSUSE:Leap 15.5
From an advisory covering 4 CVEs
 before 3.9.18-150300.4.38.1
3.9.18-150300.4.38.1
python39-documentation
openSUSE:Leap 15.5
From an advisory covering 4 CVEs
 before 3.9.18-150300.4.38.1
3.9.18-150300.4.38.1
python3
SUSE:Linux Enterprise Module for Web and Scripting 12
From an advisory covering 2 CVEs
 before 3.4.10-25.124.1
3.4.10-25.124.1
python3-base
SUSE:Linux Enterprise Module for Web and Scripting 12
From an advisory covering 2 CVEs
 before 3.4.10-25.124.1
3.4.10-25.124.1
python3
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 2 CVEs
 before 3.4.10-25.124.1
3.4.10-25.124.1
python3-base
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 2 CVEs
 before 3.4.10-25.124.1
3.4.10-25.124.1
python3
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 2 CVEs
 before 3.4.10-25.124.1
3.4.10-25.124.1
python3-base
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 2 CVEs
 before 3.4.10-25.124.1
3.4.10-25.124.1
python3
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 2 CVEs
 before 3.4.10-25.124.1
3.4.10-25.124.1
python3-base
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 2 CVEs
 before 3.4.10-25.124.1
3.4.10-25.124.1
python310
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 3.10.13-150400.4.42.1
3.10.13-150400.4.42.1
python310-core
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 3.10.13-150400.4.42.1
3.10.13-150400.4.42.1
python310
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 3.10.13-150400.4.42.1
3.10.13-150400.4.42.1
python310-core
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 3.10.13-150400.4.42.1
3.10.13-150400.4.42.1
python310
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 3.10.13-150400.4.42.1
3.10.13-150400.4.42.1
python310-core
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 3.10.13-150400.4.42.1
3.10.13-150400.4.42.1
python310
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 3.10.13-150400.4.42.1
3.10.13-150400.4.42.1
python310-core
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 3.10.13-150400.4.42.1
3.10.13-150400.4.42.1
python310
openSUSE:Leap 15.5
 before 3.10.13-150400.4.42.1
3.10.13-150400.4.42.1
python310-core
openSUSE:Leap 15.5
 before 3.10.13-150400.4.42.1
3.10.13-150400.4.42.1
python310-documentation
openSUSE:Leap 15.5
 before 3.10.13-150400.4.42.1
3.10.13-150400.4.42.1
python3
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 3.6.15-150000.3.141.1
3.6.15-150000.3.141.1
python3-core
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 3.6.15-150000.3.141.1
3.6.15-150000.3.141.1
python3
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 3.6.15-150000.3.141.1
3.6.15-150000.3.141.1
python3-core
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 3.6.15-150000.3.141.1
3.6.15-150000.3.141.1
python3
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 3.6.15-150000.3.141.1
3.6.15-150000.3.141.1
python3-core
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 3.6.15-150000.3.141.1
3.6.15-150000.3.141.1
python3
SUSE:Linux Enterprise Micro 5.1
 before 3.6.15-150000.3.141.1
3.6.15-150000.3.141.1
python3-core
SUSE:Linux Enterprise Micro 5.1
 before 3.6.15-150000.3.141.1
3.6.15-150000.3.141.1
python3
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 2 CVEs
 before 3.6.15-150300.10.57.1
3.6.15-150300.10.57.1
python3-core
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 2 CVEs
 before 3.6.15-150300.10.57.1
3.6.15-150300.10.57.1
python3
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 2 CVEs
 before 3.6.15-150300.10.57.1
3.6.15-150300.10.57.1
python3-core
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 2 CVEs
 before 3.6.15-150300.10.57.1
3.6.15-150300.10.57.1
python3
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 2 CVEs
 before 3.6.15-150300.10.57.1
3.6.15-150300.10.57.1
python3-core
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 2 CVEs
 before 3.6.15-150300.10.57.1
3.6.15-150300.10.57.1
python3
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 2 CVEs
 before 3.6.15-150300.10.57.1
3.6.15-150300.10.57.1
python3
openSUSE:Leap Micro 5.3
From an advisory covering 2 CVEs
 before 3.6.15-150300.10.57.1
3.6.15-150300.10.57.1
python3-core
openSUSE:Leap Micro 5.3
From an advisory covering 2 CVEs
 before 3.6.15-150300.10.57.1
3.6.15-150300.10.57.1
python3
openSUSE:Leap Micro 5.4
From an advisory covering 2 CVEs
 before 3.6.15-150300.10.57.1
3.6.15-150300.10.57.1
python3-core
openSUSE:Leap Micro 5.4
From an advisory covering 2 CVEs
 before 3.6.15-150300.10.57.1
3.6.15-150300.10.57.1
python3
openSUSE:Leap 15.5
From an advisory covering 2 CVEs
 before 3.6.15-150300.10.57.1
3.6.15-150300.10.57.1
python3-core
openSUSE:Leap 15.5
From an advisory covering 2 CVEs
 before 3.6.15-150300.10.57.1
3.6.15-150300.10.57.1
python3-documentation
openSUSE:Leap 15.5
From an advisory covering 2 CVEs
 before 3.6.15-150300.10.57.1
3.6.15-150300.10.57.1
python39
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 3.9.19-150300.4.41.1
3.9.19-150300.4.41.1
python39-core
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 3.9.19-150300.4.41.2
3.9.19-150300.4.41.2
python39-documentation
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 3.9.19-150300.4.41.1
3.9.19-150300.4.41.1
python310
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 3.10.14-150400.4.45.1
3.10.14-150400.4.45.1
python310-core
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 3.10.14-150400.4.45.1
3.10.14-150400.4.45.1
python310-documentation
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 3.10.14-150400.4.45.1
3.10.14-150400.4.45.1
python311
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 3.11.9-150400.9.26.1
3.11.9-150400.9.26.1
python311-core
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 3.11.9-150400.9.26.1
3.11.9-150400.9.26.1
python311-documentation
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 3.11.9-150400.9.26.1
3.11.9-150400.9.26.1
python3.4
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.4~b1-0ubuntu33.4~b1-4ubuntu43.4~b1-4ubuntu63.4~b1-5ubuntu23.4~b2-1
Show 29 moreShow less
3.4~b3-1ubuntu13.4~rc1-1build13.4~rc2-13.4~rc3-0ubuntu13.4.0-13.4.0-2ubuntu13.4.0-2ubuntu1.13.4.3-1ubuntu1~14.04.13.4.3-1ubuntu1~14.04.33.4.3-1ubuntu1~14.04.43.4.3-1ubuntu1~14.04.53.4.3-1ubuntu1~14.04.63.4.3-1ubuntu1~14.04.73.4.3-1ubuntu1~14.04.7+esm23.4.3-1ubuntu1~14.04.7+esm43.4.3-1ubuntu1~14.04.7+esm63.4.3-1ubuntu1~14.04.7+esm73.4.3-1ubuntu1~14.04.7+esm83.4.3-1ubuntu1~14.04.7+esm103.4.3-1ubuntu1~14.04.7+esm113.4.3-1ubuntu1~14.04.7+esm123.4.3-1ubuntu1~14.04.7+esm133.4.3-1ubuntu1~14.04.7+esm143.4.3-1ubuntu1~14.04.7+esm153.4.3-1ubuntu1~14.04.7+esm163.4.3-1ubuntu1~14.04.7+esm173.4.3-1ubuntu1~14.04.7+esm193.4.3-1ubuntu1~14.04.7+esm203.4.3-1ubuntu1~14.04.7+esm21
 None known
python3.5
Ubuntu:Pro:16.04:LTS
 before 3.5.2-2ubuntu0~16.04.13+esm13, plus listed versions
3.5.0-33.5.0-3ubuntu13.5.1~rc1-2ubuntu13.5.1-13.5.1-2
Show 30 moreShow less
3.5.1-33.5.1-53.5.1-6ubuntu13.5.1-6ubuntu23.5.1-9ubuntu13.5.1-103.5.2-2~16.013.5.2-2~16.043.5.2-2ubuntu0~16.04.13.5.2-2ubuntu0~16.04.23.5.2-2ubuntu0~16.04.33.5.2-2ubuntu0~16.04.43.5.2-2ubuntu0~16.04.53.5.2-2ubuntu0~16.04.83.5.2-2ubuntu0~16.04.93.5.2-2ubuntu0~16.04.103.5.2-2ubuntu0~16.04.113.5.2-2ubuntu0~16.04.123.5.2-2ubuntu0~16.04.133.5.2-2ubuntu0~16.04.13+esm13.5.2-2ubuntu0~16.04.13+esm23.5.2-2ubuntu0~16.04.13+esm33.5.2-2ubuntu0~16.04.13+esm53.5.2-2ubuntu0~16.04.13+esm63.5.2-2ubuntu0~16.04.13+esm73.5.2-2ubuntu0~16.04.13+esm83.5.2-2ubuntu0~16.04.13+esm93.5.2-2ubuntu0~16.04.13+esm103.5.2-2ubuntu0~16.04.13+esm113.5.2-2ubuntu0~16.04.13+esm12
3.5.2-2ubuntu0~16.04.13+esm13
python3.7
Ubuntu:Pro:18.04:LTS
 before 3.7.5-2ubuntu1~18.04.2+esm3, plus listed versions
3.7.0~a2-13.7.0~a3-13.7.0~a3-23.7.0~a3-33.7.0~a4-1
Show 12 moreShow less
3.7.0~b1-13.7.0~b1-1build13.7.0~b2-13.7.0~b3-13.7.0-1~18.043.7.1-1~18.043.7.3-2~18.04.13.7.5-2~18.043.7.5-2~18.04.43.7.5-2ubuntu1~18.04.23.7.5-2ubuntu1~18.04.2+esm13.7.5-2ubuntu1~18.04.2+esm2
3.7.5-2ubuntu1~18.04.2+esm3
python3.8
Ubuntu:Pro:18.04:LTS
 before 3.8.0-3ubuntu1~18.04.2+esm2, plus listed versions
3.8.0-3~18.043.8.0-3~18.04.13.8.0-3ubuntu1~18.04.23.8.0-3ubuntu1~18.04.2+esm1
3.8.0-3ubuntu1~18.04.2+esm2
python3.8
Ubuntu:20.04:LTS
 before 3.8.10-0ubuntu1~20.04.10, plus listed versions
3.8.0-13.8.0-23.8.0-33.8.0-43.8.0-5
Show 18 moreShow less
3.8.1-2ubuntu33.8.2~rc1-1ubuntu13.8.2-13.8.2-1ubuntu13.8.2-1ubuntu1.13.8.2-1ubuntu1.23.8.5-1~20.043.8.5-1~20.04.23.8.5-1~20.04.33.8.10-0ubuntu1~20.043.8.10-0ubuntu1~20.04.13.8.10-0ubuntu1~20.04.23.8.10-0ubuntu1~20.04.43.8.10-0ubuntu1~20.04.53.8.10-0ubuntu1~20.04.63.8.10-0ubuntu1~20.04.73.8.10-0ubuntu1~20.04.83.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.10
python3.9
Ubuntu:Pro:20.04:LTS
 before 3.9.5-3ubuntu0~20.04.1+esm2, plus listed versions
3.9.0~rc1-1~20.043.9.0-5~20.043.9.5-3~20.04.13.9.5-3ubuntu0~20.04.13.9.5-3ubuntu0~20.04.1+esm1
3.9.5-3ubuntu0~20.04.1+esm2
python3.10
Ubuntu:22.04:LTS
 before 3.10.12-1~22.04.4, plus listed versions
3.10.0-23.10.0-33.10.0-43.10.0-53.10.0-5build1
Show 15 moreShow less
3.10.1-13.10.1-23.10.2-13.10.2-53.10.2-73.10.3-13.10.4-33.10.4-3ubuntu0.13.10.6-1~22.043.10.6-1~22.04.13.10.6-1~22.04.23.10.6-1~22.04.2ubuntu13.10.6-1~22.04.2ubuntu1.13.10.12-1~22.04.23.10.12-1~22.04.3
3.10.12-1~22.04.4
python3.11
Ubuntu:Pro:22.04:LTS
 before 3.11.0~rc1-1~22.04.1~esm1, plus listed versions
3.11.0~rc1-1~22.04
3.11.0~rc1-1~22.04.1~esm1
python3.5
Ubuntu:Pro:14.04:LTS
From an advisory covering 41 CVEs
 before 3.5.2-2ubuntu0~16.04.4~14.04.1+esm1, plus listed versions
3.5.2-2ubuntu0~16.04.4~14.04.1
3.5.2-2ubuntu0~16.04.4~14.04.1+esm1
python3.5
Ubuntu:Pro:16.04:LTS
From an advisory covering 41 CVEs
 before 3.5.2-2ubuntu0~16.04.13+esm13, plus listed versions
3.5.0-33.5.0-3ubuntu13.5.1~rc1-2ubuntu13.5.1-13.5.1-2
Show 30 moreShow less
3.5.1-33.5.1-53.5.1-6ubuntu13.5.1-6ubuntu23.5.1-9ubuntu13.5.1-103.5.2-2~16.013.5.2-2~16.043.5.2-2ubuntu0~16.04.13.5.2-2ubuntu0~16.04.23.5.2-2ubuntu0~16.04.33.5.2-2ubuntu0~16.04.43.5.2-2ubuntu0~16.04.53.5.2-2ubuntu0~16.04.83.5.2-2ubuntu0~16.04.93.5.2-2ubuntu0~16.04.103.5.2-2ubuntu0~16.04.113.5.2-2ubuntu0~16.04.123.5.2-2ubuntu0~16.04.133.5.2-2ubuntu0~16.04.13+esm13.5.2-2ubuntu0~16.04.13+esm23.5.2-2ubuntu0~16.04.13+esm33.5.2-2ubuntu0~16.04.13+esm53.5.2-2ubuntu0~16.04.13+esm63.5.2-2ubuntu0~16.04.13+esm73.5.2-2ubuntu0~16.04.13+esm83.5.2-2ubuntu0~16.04.13+esm93.5.2-2ubuntu0~16.04.13+esm103.5.2-2ubuntu0~16.04.13+esm113.5.2-2ubuntu0~16.04.13+esm12
3.5.2-2ubuntu0~16.04.13+esm13
python3.6
Ubuntu:Pro:18.04:LTS
From an advisory covering 41 CVEs
 before 3.6.9-1~18.04ubuntu1.13+esm2, plus listed versions
3.6.3-1ubuntu13.6.4~rc1-13.6.4~rc1-23.6.4-13.6.4-2
Show 22 moreShow less
3.6.4-3build13.6.4-43.6.5~rc1-13.6.5-33.6.6-1~18.043.6.7-1~18.043.6.8-1~18.04.13.6.8-1~18.04.23.6.8-1~18.04.33.6.9-1~18.043.6.9-1~18.04ubuntu13.6.9-1~18.04ubuntu1.13.6.9-1~18.04ubuntu1.33.6.9-1~18.04ubuntu1.43.6.9-1~18.04ubuntu1.63.6.9-1~18.04ubuntu1.73.6.9-1~18.04ubuntu1.83.6.9-1~18.04ubuntu1.93.6.9-1~18.04ubuntu1.103.6.9-1~18.04ubuntu1.123.6.9-1~18.04ubuntu1.133.6.9-1~18.04ubuntu1.13+esm1
3.6.9-1~18.04ubuntu1.13+esm2
python3.7
Ubuntu:Pro:18.04:LTS
From an advisory covering 41 CVEs
 before 3.7.5-2ubuntu1~18.04.2+esm3, plus listed versions
3.7.0~a2-13.7.0~a3-13.7.0~a3-23.7.0~a3-33.7.0~a4-1
Show 12 moreShow less
3.7.0~b1-13.7.0~b1-1build13.7.0~b2-13.7.0~b3-13.7.0-1~18.043.7.1-1~18.043.7.3-2~18.04.13.7.5-2~18.043.7.5-2~18.04.43.7.5-2ubuntu1~18.04.23.7.5-2ubuntu1~18.04.2+esm13.7.5-2ubuntu1~18.04.2+esm2
3.7.5-2ubuntu1~18.04.2+esm3
python3.8
Ubuntu:Pro:18.04:LTS
From an advisory covering 41 CVEs
 before 3.8.0-3ubuntu1~18.04.2+esm2, plus listed versions
3.8.0-3~18.043.8.0-3~18.04.13.8.0-3ubuntu1~18.04.23.8.0-3ubuntu1~18.04.2+esm1
3.8.0-3ubuntu1~18.04.2+esm2
python3.8
Ubuntu:20.04:LTS
From an advisory covering 41 CVEs
 before 3.8.10-0ubuntu1~20.04.10, plus listed versions
3.8.0-13.8.0-23.8.0-33.8.0-43.8.0-5
Show 18 moreShow less
3.8.1-2ubuntu33.8.2~rc1-1ubuntu13.8.2-13.8.2-1ubuntu13.8.2-1ubuntu1.13.8.2-1ubuntu1.23.8.5-1~20.043.8.5-1~20.04.23.8.5-1~20.04.33.8.10-0ubuntu1~20.043.8.10-0ubuntu1~20.04.13.8.10-0ubuntu1~20.04.23.8.10-0ubuntu1~20.04.43.8.10-0ubuntu1~20.04.53.8.10-0ubuntu1~20.04.63.8.10-0ubuntu1~20.04.73.8.10-0ubuntu1~20.04.83.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.10
python3.9
Ubuntu:Pro:20.04:LTS
From an advisory covering 41 CVEs
 before 3.9.5-3ubuntu0~20.04.1+esm2, plus listed versions
3.9.0~rc1-1~20.043.9.0-5~20.043.9.5-3~20.04.13.9.5-3ubuntu0~20.04.13.9.5-3ubuntu0~20.04.1+esm1
3.9.5-3ubuntu0~20.04.1+esm2
python3.10
Ubuntu:22.04:LTS
From an advisory covering 41 CVEs
 before 3.10.12-1~22.04.4, plus listed versions
3.10.0-23.10.0-33.10.0-43.10.0-53.10.0-5build1
Show 15 moreShow less
3.10.1-13.10.1-23.10.2-13.10.2-53.10.2-73.10.3-13.10.4-33.10.4-3ubuntu0.13.10.6-1~22.043.10.6-1~22.04.13.10.6-1~22.04.23.10.6-1~22.04.2ubuntu13.10.6-1~22.04.2ubuntu1.13.10.12-1~22.04.23.10.12-1~22.04.3
3.10.12-1~22.04.4
python3.11
Ubuntu:Pro:22.04:LTS
From an advisory covering 41 CVEs
 before 3.11.0~rc1-1~22.04.1~esm1, plus listed versions
3.11.0~rc1-1~22.04
3.11.0~rc1-1~22.04.1~esm1
python38
openSUSE:Tumbleweed
 before 3.8.18-5.1
3.8.18-5.1
python310
openSUSE:Tumbleweed
 before 3.10.13-5.1
3.10.13-5.1
python311
openSUSE:Tumbleweed
 before 3.11.8-3.1
3.11.8-3.1
python39
openSUSE:Tumbleweed
 before 3.9.18-5.1
3.9.18-5.1
python312
openSUSE:Tumbleweed
 before 3.12.2-4.1
3.12.2-4.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-6597 is a high vulnerability (CVSS 7.8) in Python Software Foundation Cpython, published March 6, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 24th percentile. Fixed in python3 3.10.14-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 372 package rows and 1 reference. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 16 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open