{"id":"CVE-2021-4189","aliases":["ALSA-2022:1821","ALSA-2022:1986","BIT-libpython-2021-4189","BIT-python-2021-4189","BIT-python-min-2021-4189","CLSA-2022-1649170553","CLSA-2022-1649348075","CLSA-2022-1653920195","CLSA-2022-1654010877","CLSA-2022-1654525948","CLSA-2022-1654526367","CLSA-2026-1790238098","CLSA-2026-1791919907","DEBIAN-CVE-2021-4189","DLA-2919-1","DLA-3432-1","DLA-3477-1","DLA-3980-1","EUVD-2021-34049","GHSA-67xf-xphq-9mcc","MGASA-2022-0367","OESA-2022-1566","RHSA-2021:3254","RHSA-2022:1663","RHSA-2022:1821","RHSA-2022:1986","RLSA-2022:1821","SUSE-SU-2022:0882-1","SUSE-SU-2022:1091-1","SUSE-SU-2022:1140-1","SUSE-SU-2026:22959-1","SUSE-SU-2026:23743-1","SUSE-SU-2026:4534-1","UBUNTU-CVE-2021-4189","USN-5342-1","USN-5342-2","USN-6891-1","USN-8509-1","openSUSE-SU-2022:1091-1","openSUSE-SU-2024:11835-1","openSUSE-SU-2026:11101-1","openSUSE-SU-2026:11181-1","openSUSE-SU-2026:11342-1","openSUSE-SU-2026:11747-1","openSUSE-SU-2026:11756-1","openSUSE-SU-2026:11757-1","openSUSE-SU-2026:12477-1","openSUSE-SU-2026:21459-1"],"status":"published","title":"A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...","description":"A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.03607,"percentile":0.89622,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-252"],"published":"2021-12-31T00:00:00Z","modified":"2026-11-10T12:28:53Z","fixes":[{"ecosystem":"Bitnami","package":"libpython","fixed_in":["3.6.14","3.7.11","3.8.9","3.9.3","3.10.1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"python","fixed_in":["3.6.14","3.7.11","3.8.9","3.9.3","3.10.1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"python-min","fixed_in":["3.6.14","3.7.11","3.8.9","3.9.3","3.10.1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"idle-python2.7","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-dev","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-minimal","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-stdlib","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-testsuite","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-dev","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-doc","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-examples","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-minimal","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"idle-python3.5","fixed_in":["1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5","fixed_in":["1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5-dev","fixed_in":["1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5-minimal","fixed_in":["1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5-stdlib","fixed_in":["1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5-testsuite","fixed_in":["1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5","fixed_in":["1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-dev","fixed_in":["1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-doc","fixed_in":["1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-examples","fixed_in":["1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-minimal","fixed_in":["1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-venv","fixed_in":["1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"pypy3","fixed_in":["7.3.5+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pypy3","fixed_in":["7.3.5+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pypy3","fixed_in":["7.3.5+dfsg-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python2.7","fixed_in":["2.7.6-8ubuntu0.6+esm12"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python3.4","fixed_in":["3.4.3-1ubuntu1~14.04.7+esm12"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python3.5","fixed_in":["3.5.2-2ubuntu0~16.04.4~14.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python2.7","fixed_in":["2.7.12-1ubuntu0~16.04.18+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python3.5","fixed_in":["3.5.2-2ubuntu0~16.04.13+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"python2.7","fixed_in":["2.7.17-1~18.04ubuntu1.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"python3.6","fixed_in":["3.6.9-1~18.04ubuntu1.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.7","fixed_in":["3.7.5-2ubuntu1~18.04.2+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.8","fixed_in":["3.8.0-3ubuntu1~18.04.2+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python2.7","fixed_in":["2.7.18-1~20.04.3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python2.7","fixed_in":["2.7.18-13ubuntu1.1+esm2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"python","fixed_in":["2.7.18-15.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"babel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-10.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python-nose-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.7-31.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python-nose-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.7-31.module_el8.5.0+2569+5c5719bc"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python-psycopg2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-7.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python-sqlalchemy-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-2.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python-sqlalchemy-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-2.module_el8.5.0+2569+5c5719bc"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-10.module_el8.6.0+2781+fed64c13.alma"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-Cython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.28.1-7.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-PyMySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-10.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-attrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.4.0-10.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-babel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-10.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-backports","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-16.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-backports-ssl_match_hostname","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0.1-12.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-1.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-chardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-10.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-coverage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1-4.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-10.module_el8.6.0+2781+fed64c13.alma"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-10.module_el8.6.0+2781+fed64c13.alma"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-10.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-docs-info","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-docutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14-12.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-funcsigs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-13.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5-7.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-ipaddress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.18-6.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-9.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-10.module_el8.6.0+2781+fed64c13.alma"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.3-6.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-markupsafe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23-19.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-mock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-13.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-nose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.7-31.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.2-16.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-numpy-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.2-16.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-numpy-f2py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.2-16.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.3-19.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-pip-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.3-19.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-pluggy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-8.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-psycopg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-7.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-psycopg2-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-7.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-psycopg2-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-7.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-6.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-22.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-pymongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-1.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-pymongo-gridfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-1.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-pysocks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-6.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-pytest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-13.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-pytest-mock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-4.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-pytz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017.2-12.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-16.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-3.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3-38.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-21.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"39.0.1-13.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-setuptools-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"39.0.1-13.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-setuptools_scm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-6.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-six","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-6.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-sqlalchemy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-2.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-10.module_el8.6.0+2781+fed64c13.alma"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-10.module_el8.6.0+2781+fed64c13.alma"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-10.module_el8.6.0+2781+fed64c13.alma"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.2-3.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-virtualenv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-21.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.31.1-3.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-wheel-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.31.1-3.module_el8.6.0+2781+fed64c13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"platform-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-45.el8.alma"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"platform-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-45.el8.alma"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"platform-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-45.el8.alma"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-45.el8.alma"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-45.el8.alma"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-45.el8.alma"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-45.el8.alma"}]}],"bundled":2},{"source":"osv","ecosystem":"Bitnami","package":"libpython","ranges":[{"type":"SEMVER","events":[{"introduced":"3.6.0"},{"fixed":"3.6.14"},{"introduced":"3.7.0"},{"fixed":"3.7.11"},{"introduced":"3.8.0"},{"fixed":"3.8.9"},{"introduced":"3.9.0"},{"fixed":"3.9.3"},{"introduced":"3.10.0"},{"fixed":"3.10.1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"python","ranges":[{"type":"SEMVER","events":[{"introduced":"3.6.0"},{"fixed":"3.6.14"},{"introduced":"3.7.0"},{"fixed":"3.7.11"},{"introduced":"3.8.0"},{"fixed":"3.8.9"},{"introduced":"3.9.0"},{"fixed":"3.9.3"},{"introduced":"3.10.0"},{"fixed":"3.10.1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"python-min","ranges":[{"type":"SEMVER","events":[{"introduced":"3.6.0"},{"fixed":"3.6.14"},{"introduced":"3.7.0"},{"fixed":"3.7.11"},{"introduced":"3.8.0"},{"fixed":"3.8.9"},{"introduced":"3.9.0"},{"fixed":"3.9.3"},{"introduced":"3.10.0"},{"fixed":"3.10.1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"idle-python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"idle-python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-venv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"platform-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-39.el8_4.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"platform-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-39.el8_4.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"platform-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-39.el8_4.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-39.el8_4.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-39.el8_4.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-39.el8_4.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-39.el8_4.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-39.el8_4.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"platform-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-41.el8.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"platform-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-41.el8.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"platform-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-41.el8.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-41.el8.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-41.el8.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-41.el8.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-41.el8.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-41.el8.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"babel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-9.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python-nose-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.7-30.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python-psycopg2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-7.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python-sqlalchemy-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-2.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-4.module_el8.4.0+2051+0b56c8de.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-Cython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.28.1-7.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-PyMySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-10.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-attrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.4.0-10.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-babel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-9.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-backports","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-16.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-backports-ssl_match_hostname","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0.1-12.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-11.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-chardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-10.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-coverage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1-4.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-4.module_el8.4.0+2051+0b56c8de.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-4.module_el8.4.0+2051+0b56c8de.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-10.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-docs-info","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-docutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14-12.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-funcsigs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-13.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5-7.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-ipaddress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.18-6.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-8.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-4.module_el8.4.0+2051+0b56c8de.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.3-4.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-markupsafe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23-19.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-mock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-13.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-nose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.7-30.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.2-16.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-numpy-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.2-16.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-numpy-f2py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.2-16.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.3-18.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-pip-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.3-18.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-pluggy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-8.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-psycopg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-7.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-psycopg2-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-7.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-psycopg2-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-7.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-6.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-20.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-pymongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-11.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-pymongo-gridfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-11.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-pysocks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-6.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-pytest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-13.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-pytest-mock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-4.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-pytz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017.2-12.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-16.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-3.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3-38.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-20.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"39.0.1-13.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-setuptools-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"39.0.1-13.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-setuptools_scm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-6.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-six","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-6.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-sqlalchemy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-2.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-4.module_el8.4.0+2051+0b56c8de.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-4.module_el8.4.0+2051+0b56c8de.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-4.module_el8.4.0+2051+0b56c8de.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.2-3.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-virtualenv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-19.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.31.1-2.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-wheel-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.31.1-2.module_el8.4.0+2051+0b56c8de"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"babel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-10.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python-nose-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.7-31.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python-psycopg2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-7.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python-sqlalchemy-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-2.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2050+77770ab7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-Cython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.28.1-7.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-PyMySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-10.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-attrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.4.0-10.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-babel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-10.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-backports","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-16.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-backports-ssl_match_hostname","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0.1-12.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-1.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-chardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-10.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-coverage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1-4.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2050+77770ab7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2050+77770ab7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-10.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-docs-info","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-docutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14-12.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-funcsigs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-13.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5-7.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-ipaddress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.18-6.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-9.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2050+77770ab7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.3-5.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-markupsafe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23-19.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-mock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-13.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-nose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.7-31.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.2-16.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-numpy-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.2-16.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-numpy-f2py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.2-16.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.3-18.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-pip-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.3-18.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-pluggy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-8.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-psycopg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-7.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-psycopg2-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-7.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-psycopg2-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-7.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-6.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-22.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-pymongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-1.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-pymongo-gridfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-1.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-pysocks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-6.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-pytest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-13.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-pytest-mock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-4.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-pytz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017.2-12.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-16.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-3.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3-38.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-21.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"39.0.1-13.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-setuptools-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"39.0.1-13.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-setuptools_scm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-6.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-six","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-6.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-sqlalchemy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-2.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2050+77770ab7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2050+77770ab7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2050+77770ab7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.2-3.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-virtualenv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-21.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.31.1-3.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-wheel-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.31.1-3.module_el8.5.0+2050+77770ab7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els35"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els35"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els35"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els35"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els35"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els35"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els35"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python-unversioned-command","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els39"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els39"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els39"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els39"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els39"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els39"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els39"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els39"}]}],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"pypy3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.5+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"pypy3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.5+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"pypy3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.5+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.13-2+deb9u6"}]}],"versions":["2.7.13-2","2.7.13-2+deb9u1","2.7.13-2+deb9u2","2.7.13-2+deb9u3","2.7.13-2+deb9u4","2.7.13-2+deb9u5"],"bundled":2},{"source":"osv","ecosystem":"Debian:10","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u2"}]}],"versions":["2.7.16-2","2.7.16-2+deb10u1"],"bundled":9},{"source":"osv","ecosystem":"Debian:10","package":"python3.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u5"}]}],"versions":["3.7.3-2","3.7.3-2+deb10u1","3.7.3-2+deb10u2","3.7.3-2+deb10u3","3.7.3-2+deb10u4"],"bundled":7},{"source":"osv","ecosystem":"Debian:11","package":"python3.9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-1+deb11u2"}]}],"versions":["3.9.2-1","3.9.2-1+deb11u1"],"bundled":23},{"source":"osv","ecosystem":"Mageia:8","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.5.mga8"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.9-20.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.9-19.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.9-21.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-python38-babel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.0-12.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-python38-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.11-2.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-python38-python-babel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.0-12.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-python38-python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-5.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-python38-python-cryptography-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-5.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-python38-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.11-2.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-python38-python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.11-2.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-python38-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.11-2.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-python38-python-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.11-2.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-python38-python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.3-6.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-python38-python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.11-2.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-python38-python-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1-7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-python38-python-lxml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1-7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-python38-python-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.3.1-2.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-python38-python-pip-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.3.1-2.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-python38-python-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.11-2.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-python38-python-srpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.11-2.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-python38-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.11-2.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-python38-python-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.11-2.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-python38-python-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.7-7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"python27-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.18-4.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"python27-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.18-4.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"python27-python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.18-4.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"python27-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.18-4.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"python27-python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.18-4.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"python27-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.18-4.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"python27-python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.18-4.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"python27-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.18-4.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"Cython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.28.1-7.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"Cython-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.28.1-7.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PyYAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12-16.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PyYAML-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12-16.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"babel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.1-10.module+el8.5.0+11014+88fc0d0b"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.2-16.module+el8.4.0+9406+221a4565"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"numpy-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.2-16.module+el8.4.0+9406+221a4565"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pytest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-13.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-PyMySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-10.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-attrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.4.0-10.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-backports","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-16.module+el8.4.0+9193+f3daf6ef"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-backports-ssl_match_hostname","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0.1-12.module+el8.4.0+9193+f3daf6ef"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-chardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.4-10.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-coverage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.1-4.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-coverage-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.1-4.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-10.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.16-2.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-docutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-12.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-funcsigs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-13.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-7.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-ipaddress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-6.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10-9.module+el8.5.0+10541+706bb066"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.3-6.module+el8.6.0+13959+8e368262"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-lxml-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.3-6.module+el8.6.0+13959+8e368262"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-markupsafe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.23-19.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-mock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-13.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-nose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.7-31.module+el8.5.0+12203+77770ab7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-nose-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.7-31.module+el8.5.0+12203+77770ab7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-pluggy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-8.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-psycopg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-7.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-psycopg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-7.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-psycopg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-7.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-psycopg2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-7.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-6.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-22.module+el8.5.0+10788+a4cea9e0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-pymongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-1.module+el8.5.0+10264+e5753a40"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-pymongo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-1.module+el8.5.0+10264+e5753a40"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-pymongo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-1.module+el8.5.0+10264+e5753a40"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-pysocks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-6.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-pytest-mock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.0-4.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20.0-3.module+el8.2.0+4577+feefd9b8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-setuptools_scm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-6.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-sqlalchemy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-2.module+el8.3.0+6647+8d010749"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-sqlalchemy-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-2.module+el8.3.0+6647+8d010749"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.2-3.module+el8.4.0+9193+f3daf6ef"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-virtualenv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.1.0-21.module+el8.5.0+12203+77770ab7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.31.1-3.module+el8.5.0+12203+77770ab7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.18-10.module+el8.6.0+14191+7fdd52cd"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-Cython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.28.1-7.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-Cython-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.28.1-7.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-PyMySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-10.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-attrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.4.0-10.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-babel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.1-10.module+el8.5.0+11014+88fc0d0b"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-backports","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-16.module+el8.4.0+9193+f3daf6ef"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-backports-ssl_match_hostname","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0.1-12.module+el8.4.0+9193+f3daf6ef"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-bson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-1.module+el8.5.0+10264+e5753a40"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-bson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-1.module+el8.5.0+10264+e5753a40"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-chardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.4-10.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-coverage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.1-4.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-coverage-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.1-4.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.18-10.module+el8.6.0+14191+7fdd52cd"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.18-10.module+el8.6.0+14191+7fdd52cd"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.18-10.module+el8.6.0+14191+7fdd52cd"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.18-10.module+el8.6.0+14191+7fdd52cd"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-10.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.16-2.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-docs-info","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.16-2.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-docutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-12.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-funcsigs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-13.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-7.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-ipaddress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-6.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10-9.module+el8.5.0+10541+706bb066"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.18-10.module+el8.6.0+14191+7fdd52cd"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.3-6.module+el8.6.0+13959+8e368262"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-lxml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.3-6.module+el8.6.0+13959+8e368262"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-markupsafe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.23-19.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-mock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-13.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-nose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.7-31.module+el8.5.0+12203+77770ab7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.2-16.module+el8.4.0+9406+221a4565"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-numpy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.2-16.module+el8.4.0+9406+221a4565"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-numpy-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.2-16.module+el8.4.0+9406+221a4565"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-numpy-f2py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.2-16.module+el8.4.0+9406+221a4565"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.3-19.module+el8.6.0+13001+ad200bd9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pip-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.3-19.module+el8.6.0+13001+ad200bd9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pluggy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-8.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-psycopg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-7.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-psycopg2-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-7.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-psycopg2-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-7.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-psycopg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-7.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-psycopg2-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-7.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-6.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-22.module+el8.5.0+10788+a4cea9e0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pymongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-1.module+el8.5.0+10264+e5753a40"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pymongo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-1.module+el8.5.0+10264+e5753a40"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pymongo-gridfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-1.module+el8.5.0+10264+e5753a40"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pysocks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-6.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pytest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-13.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pytest-mock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.0-4.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pytz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2017.2-12.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12-16.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pyyaml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12-16.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20.0-3.module+el8.2.0+4577+feefd9b8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3-38.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-21.module+el8.5.0+10858+05337455"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-scipy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-21.module+el8.5.0+10858+05337455"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:39.0.1-13.module+el8.4.0+9442+27d0e81c"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-setuptools-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:39.0.1-13.module+el8.4.0+9442+27d0e81c"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-setuptools_scm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-6.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-six","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-6.module+el8.4.0+9287+299307c7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-sqlalchemy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-2.module+el8.3.0+6647+8d010749"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.18-10.module+el8.6.0+14191+7fdd52cd"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.18-10.module+el8.6.0+14191+7fdd52cd"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.18-10.module+el8.6.0+14191+7fdd52cd"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.2-3.module+el8.4.0+9193+f3daf6ef"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-virtualenv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.1.0-21.module+el8.5.0+12203+77770ab7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.31.1-3.module+el8.5.0+12203+77770ab7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-wheel-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.31.1-3.module+el8.5.0+12203+77770ab7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pytz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2017.2-12.module+el8.1.0+3111+de3f2d8e"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-21.module+el8.5.0+10858+05337455"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"scipy-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-21.module+el8.5.0+10858+05337455"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"platform-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-45.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"platform-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-45.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"platform-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-45.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-45.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-45.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-45.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-45.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-45.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"platform-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-45.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-45.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-45.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-45.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-45.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-45.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"babel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.1-10.module+el8.5.0+706+735ec4b3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"Cython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.28.1-7.module+el8.5.0+706+735ec4b3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"Cython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.28.1-7.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.2-16.module+el8.5.0+706+735ec4b3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"numpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.2-16.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pytest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-13.module+el8.5.0+706+735ec4b3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pytest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-13.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.18-10.module+el8.6.0+793+57002515.rocky.0.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python2-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.3-19.module+el8.6.0+793+57002515"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python2-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3-38.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python2-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:39.0.1-13.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python2-six","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-6.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-attrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.4.0-10.module+el8.5.0+706+735ec4b3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-attrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.4.0-10.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-backports","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-16.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-backports-ssl_match_hostname","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0.1-12.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-chardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.4-10.module+el8.5.0+706+735ec4b3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-chardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.4-10.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-coverage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.1-4.module+el8.5.0+706+735ec4b3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-coverage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.1-4.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-10.module+el8.7.0+1062+663ba31c"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-10.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-10.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.16-2.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-docutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-12.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-docutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-12.module+el8.3.0+120+426d8baf"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-funcsigs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-13.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-7.module+el8.5.0+706+735ec4b3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-7.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-ipaddress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-6.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10-9.module+el8.7.0+1062+663ba31c"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10-9.module+el8.5.0+706+735ec4b3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.3-6.module+el8.6.0+793+57002515"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-markupsafe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.23-19.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-markupsafe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.23-19.module+el8.5.0+706+735ec4b3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-mock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-13.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-nose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.7-31.module+el8.5.0+671+195e4563"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-pluggy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-8.module+el8.5.0+706+735ec4b3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-pluggy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-8.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-psycopg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-7.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-psycopg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-7.module+el8.5.0+706+735ec4b3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-6.module+el8.5.0+706+735ec4b3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-6.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-22.module+el8.5.0+671+195e4563"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-pymongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-1.module+el8.5.0+671+195e4563"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-pymongo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-1.module+el8.4.0+597+ddf0ddea"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20.0-3.module+el8.5.0+706+735ec4b3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20.0-3.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-PyMySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-10.module+el8.5.0+706+735ec4b3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-PyMySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-10.module+el8.3.0+120+426d8baf"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-pysocks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-6.module+el8.5.0+706+735ec4b3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-pysocks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-6.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-pytest-mock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.0-4.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-setuptools_scm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-6.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-sqlalchemy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-2.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-sqlalchemy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-2.module+el8.3.0+120+426d8baf"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.2-3.module+el8.5.0+706+735ec4b3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.2-3.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-virtualenv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.1.0-21.module+el8.5.0+671+195e4563"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.31.1-3.module+el8.5.0+671+195e4563"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pytz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2017.2-12.module+el8.5.0+706+735ec4b3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pytz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2017.2-12.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"PyYAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12-16.module+el8.5.0+706+735ec4b3"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"PyYAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12-16.module+el8.4.0+403+9ae17a31"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"scipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-21.module+el8.5.0+671+195e4563"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-25.85.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-25.85.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-25.85.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-25.85.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-25.85.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-25.85.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-25.85.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-25.85.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.38.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.38.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.38.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"python313-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-slfo.1.1_1.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-slfo.1.1_1.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-150600.3.68.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python312-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-150600.3.68.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-150600.3.68.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python312-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-150600.3.68.1"}]}],"bundled":26},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-8ubuntu0.6+esm12"}]}],"versions":["2.7.5-8ubuntu3","2.7.5-8ubuntu4","2.7.6-2","2.7.6-2ubuntu1","2.7.6-3","2.7.6-3ubuntu1","2.7.6-4","2.7.6-4ubuntu1","2.7.6-5","2.7.6-7","2.7.6-8","2.7.6-8ubuntu0.2","2.7.6-8ubuntu0.3","2.7.6-8ubuntu0.4","2.7.6-8ubuntu0.5","2.7.6-8ubuntu0.6+esm2","2.7.6-8ubuntu0.6+esm3","2.7.6-8ubuntu0.6+esm5","2.7.6-8ubuntu0.6+esm6","2.7.6-8ubuntu0.6+esm7","2.7.6-8ubuntu0.6+esm8","2.7.6-8ubuntu0.6+esm9","2.7.6-8ubuntu0.6+esm10","2.7.6-8ubuntu0.6+esm11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python3.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-1ubuntu1~14.04.7+esm12"}]}],"versions":["3.4~b1-0ubuntu3","3.4~b1-4ubuntu4","3.4~b1-4ubuntu6","3.4~b1-5ubuntu2","3.4~b2-1","3.4~b3-1ubuntu1","3.4~rc1-1build1","3.4~rc2-1","3.4~rc3-0ubuntu1","3.4.0-1","3.4.0-2ubuntu1","3.4.0-2ubuntu1.1","3.4.3-1ubuntu1~14.04.1","3.4.3-1ubuntu1~14.04.3","3.4.3-1ubuntu1~14.04.4","3.4.3-1ubuntu1~14.04.5","3.4.3-1ubuntu1~14.04.6","3.4.3-1ubuntu1~14.04.7","3.4.3-1ubuntu1~14.04.7+esm2","3.4.3-1ubuntu1~14.04.7+esm4","3.4.3-1ubuntu1~14.04.7+esm6","3.4.3-1ubuntu1~14.04.7+esm7","3.4.3-1ubuntu1~14.04.7+esm8","3.4.3-1ubuntu1~14.04.7+esm10","3.4.3-1ubuntu1~14.04.7+esm11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1"}]}],"versions":["3.5.2-2ubuntu0~16.04.4~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+esm1"}]}],"versions":["2.7.10-4ubuntu1","2.7.10-4ubuntu2","2.7.11-2","2.7.11-3","2.7.11-4","2.7.11-6","2.7.11-7","2.7.11-7ubuntu1","2.7.12-1~16.04","2.7.12-1ubuntu0~16.04.1","2.7.12-1ubuntu0~16.04.2","2.7.12-1ubuntu0~16.04.3","2.7.12-1ubuntu0~16.04.4","2.7.12-1ubuntu0~16.04.8","2.7.12-1ubuntu0~16.04.9","2.7.12-1ubuntu0~16.04.11","2.7.12-1ubuntu0~16.04.12","2.7.12-1ubuntu0~16.04.13","2.7.12-1ubuntu0~16.04.14","2.7.12-1ubuntu0~16.04.16","2.7.12-1ubuntu0~16.04.18"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-2ubuntu0~16.04.13+esm2"}]}],"versions":["3.5.0-3","3.5.0-3ubuntu1","3.5.1~rc1-2ubuntu1","3.5.1-1","3.5.1-2","3.5.1-3","3.5.1-5","3.5.1-6ubuntu1","3.5.1-6ubuntu2","3.5.1-9ubuntu1","3.5.1-10","3.5.2-2~16.01","3.5.2-2~16.04","3.5.2-2ubuntu0~16.04.1","3.5.2-2ubuntu0~16.04.2","3.5.2-2ubuntu0~16.04.3","3.5.2-2ubuntu0~16.04.4","3.5.2-2ubuntu0~16.04.5","3.5.2-2ubuntu0~16.04.8","3.5.2-2ubuntu0~16.04.9","3.5.2-2ubuntu0~16.04.10","3.5.2-2ubuntu0~16.04.11","3.5.2-2ubuntu0~16.04.12","3.5.2-2ubuntu0~16.04.13","3.5.2-2ubuntu0~16.04.13+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.7"}]}],"versions":["2.7.14-2ubuntu2","2.7.14-4","2.7.14-6","2.7.14-7","2.7.14-8","2.7.15~rc1-1","2.7.15~rc1-1ubuntu0.1","2.7.15-4ubuntu4~18.04","2.7.15-4ubuntu4~18.04.1","2.7.15-4ubuntu4~18.04.2","2.7.17-1~18.04","2.7.17-1~18.04ubuntu1","2.7.17-1~18.04ubuntu1.1","2.7.17-1~18.04ubuntu1.2","2.7.17-1~18.04ubuntu1.3","2.7.17-1~18.04ubuntu1.5","2.7.17-1~18.04ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"python3.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.7"}]}],"versions":["3.6.3-1ubuntu1","3.6.4~rc1-1","3.6.4~rc1-2","3.6.4-1","3.6.4-2","3.6.4-3build1","3.6.4-4","3.6.5~rc1-1","3.6.5-3","3.6.6-1~18.04","3.6.7-1~18.04","3.6.8-1~18.04.1","3.6.8-1~18.04.2","3.6.8-1~18.04.3","3.6.9-1~18.04","3.6.9-1~18.04ubuntu1","3.6.9-1~18.04ubuntu1.1","3.6.9-1~18.04ubuntu1.3","3.6.9-1~18.04ubuntu1.4","3.6.9-1~18.04ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.5-2ubuntu1~18.04.2+esm3"}]}],"versions":["3.7.0~a2-1","3.7.0~a3-1","3.7.0~a3-2","3.7.0~a3-3","3.7.0~a4-1","3.7.0~b1-1","3.7.0~b1-1build1","3.7.0~b2-1","3.7.0~b3-1","3.7.0-1~18.04","3.7.1-1~18.04","3.7.3-2~18.04.1","3.7.5-2~18.04","3.7.5-2~18.04.4","3.7.5-2ubuntu1~18.04.2","3.7.5-2ubuntu1~18.04.2+esm1","3.7.5-2ubuntu1~18.04.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-3ubuntu1~18.04.2+esm2"}]}],"versions":["3.8.0-3~18.04","3.8.0-3~18.04.1","3.8.0-3ubuntu1~18.04.2","3.8.0-3ubuntu1~18.04.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.3+esm1"}]}],"versions":["2.7.17~rc1-1","2.7.17-1","2.7.17-1ubuntu5","2.7.17-1ubuntu6","2.7.18~rc1-2","2.7.18-1~20.04","2.7.18-1~20.04.1","2.7.18-1~20.04.1+esm1","2.7.18-1~20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-13ubuntu1.1+esm2"}]}],"versions":["2.7.18-8build1","2.7.18-13","2.7.18-13ubuntu1","2.7.18-13ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python3.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-1ubuntu1~14.04.7+esm12"}]}],"versions":["3.4~b1-0ubuntu3","3.4~b1-4ubuntu4","3.4~b1-4ubuntu6","3.4~b1-5ubuntu2","3.4~b2-1","3.4~b3-1ubuntu1","3.4~rc1-1build1","3.4~rc2-1","3.4~rc3-0ubuntu1","3.4.0-1","3.4.0-2ubuntu1","3.4.0-2ubuntu1.1","3.4.3-1ubuntu1~14.04.1","3.4.3-1ubuntu1~14.04.3","3.4.3-1ubuntu1~14.04.4","3.4.3-1ubuntu1~14.04.5","3.4.3-1ubuntu1~14.04.6","3.4.3-1ubuntu1~14.04.7","3.4.3-1ubuntu1~14.04.7+esm2","3.4.3-1ubuntu1~14.04.7+esm4","3.4.3-1ubuntu1~14.04.7+esm6","3.4.3-1ubuntu1~14.04.7+esm7","3.4.3-1ubuntu1~14.04.7+esm8","3.4.3-1ubuntu1~14.04.7+esm10","3.4.3-1ubuntu1~14.04.7+esm11"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+esm1"}]}],"versions":["2.7.10-4ubuntu1","2.7.10-4ubuntu2","2.7.11-2","2.7.11-3","2.7.11-4","2.7.11-6","2.7.11-7","2.7.11-7ubuntu1","2.7.12-1~16.04","2.7.12-1ubuntu0~16.04.1","2.7.12-1ubuntu0~16.04.2","2.7.12-1ubuntu0~16.04.3","2.7.12-1ubuntu0~16.04.4","2.7.12-1ubuntu0~16.04.8","2.7.12-1ubuntu0~16.04.9","2.7.12-1ubuntu0~16.04.11","2.7.12-1ubuntu0~16.04.12","2.7.12-1ubuntu0~16.04.13","2.7.12-1ubuntu0~16.04.14","2.7.12-1ubuntu0~16.04.16","2.7.12-1ubuntu0~16.04.18"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-2ubuntu0~16.04.13+esm2"}]}],"versions":["3.5.0-3","3.5.0-3ubuntu1","3.5.1~rc1-2ubuntu1","3.5.1-1","3.5.1-2","3.5.1-3","3.5.1-5","3.5.1-6ubuntu1","3.5.1-6ubuntu2","3.5.1-9ubuntu1","3.5.1-10","3.5.2-2~16.01","3.5.2-2~16.04","3.5.2-2ubuntu0~16.04.1","3.5.2-2ubuntu0~16.04.2","3.5.2-2ubuntu0~16.04.3","3.5.2-2ubuntu0~16.04.4","3.5.2-2ubuntu0~16.04.5","3.5.2-2ubuntu0~16.04.8","3.5.2-2ubuntu0~16.04.9","3.5.2-2ubuntu0~16.04.10","3.5.2-2ubuntu0~16.04.11","3.5.2-2ubuntu0~16.04.12","3.5.2-2ubuntu0~16.04.13","3.5.2-2ubuntu0~16.04.13+esm1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.7"}]}],"versions":["2.7.14-2ubuntu2","2.7.14-4","2.7.14-6","2.7.14-7","2.7.14-8","2.7.15~rc1-1","2.7.15~rc1-1ubuntu0.1","2.7.15-4ubuntu4~18.04","2.7.15-4ubuntu4~18.04.1","2.7.15-4ubuntu4~18.04.2","2.7.17-1~18.04","2.7.17-1~18.04ubuntu1","2.7.17-1~18.04ubuntu1.1","2.7.17-1~18.04ubuntu1.2","2.7.17-1~18.04ubuntu1.3","2.7.17-1~18.04ubuntu1.5","2.7.17-1~18.04ubuntu1.6"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"python3.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.7"}]}],"versions":["3.6.3-1ubuntu1","3.6.4~rc1-1","3.6.4~rc1-2","3.6.4-1","3.6.4-2","3.6.4-3build1","3.6.4-4","3.6.5~rc1-1","3.6.5-3","3.6.6-1~18.04","3.6.7-1~18.04","3.6.8-1~18.04.1","3.6.8-1~18.04.2","3.6.8-1~18.04.3","3.6.9-1~18.04","3.6.9-1~18.04ubuntu1","3.6.9-1~18.04ubuntu1.1","3.6.9-1~18.04ubuntu1.3","3.6.9-1~18.04ubuntu1.4","3.6.9-1~18.04ubuntu1.6"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"python3.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-0ubuntu1~20.04.4"}]}],"versions":["3.8.0-1","3.8.0-2","3.8.0-3","3.8.0-4","3.8.0-5","3.8.1-2ubuntu3","3.8.2~rc1-1ubuntu1","3.8.2-1","3.8.2-1ubuntu1","3.8.2-1ubuntu1.1","3.8.2-1ubuntu1.2","3.8.5-1~20.04","3.8.5-1~20.04.2","3.8.5-1~20.04.3","3.8.10-0ubuntu1~20.04","3.8.10-0ubuntu1~20.04.1","3.8.10-0ubuntu1~20.04.2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-8ubuntu0.6+esm12"}]}],"versions":["2.7.5-8ubuntu3","2.7.5-8ubuntu4","2.7.6-2","2.7.6-2ubuntu1","2.7.6-3","2.7.6-3ubuntu1","2.7.6-4","2.7.6-4ubuntu1","2.7.6-5","2.7.6-7","2.7.6-8","2.7.6-8ubuntu0.2","2.7.6-8ubuntu0.3","2.7.6-8ubuntu0.4","2.7.6-8ubuntu0.5","2.7.6-8ubuntu0.6+esm2","2.7.6-8ubuntu0.6+esm3","2.7.6-8ubuntu0.6+esm5","2.7.6-8ubuntu0.6+esm6","2.7.6-8ubuntu0.6+esm7","2.7.6-8ubuntu0.6+esm8","2.7.6-8ubuntu0.6+esm9","2.7.6-8ubuntu0.6+esm10","2.7.6-8ubuntu0.6+esm11"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.3+esm1"}]}],"versions":["2.7.17~rc1-1","2.7.17-1","2.7.17-1ubuntu5","2.7.17-1ubuntu6","2.7.18~rc1-2","2.7.18-1~20.04","2.7.18-1~20.04.1","2.7.18-1~20.04.1+esm1","2.7.18-1~20.04.3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-13ubuntu1.1+esm2"}]}],"versions":["2.7.18-8build1","2.7.18-13","2.7.18-13ubuntu1","2.7.18-13ubuntu1.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1"}]}],"versions":["3.5.2-2ubuntu0~16.04.4~14.04.1"],"bundled":41},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-2ubuntu0~16.04.13+esm13"}]}],"versions":["3.5.0-3","3.5.0-3ubuntu1","3.5.1~rc1-2ubuntu1","3.5.1-1","3.5.1-2","3.5.1-3","3.5.1-5","3.5.1-6ubuntu1","3.5.1-6ubuntu2","3.5.1-9ubuntu1","3.5.1-10","3.5.2-2~16.01","3.5.2-2~16.04","3.5.2-2ubuntu0~16.04.1","3.5.2-2ubuntu0~16.04.2","3.5.2-2ubuntu0~16.04.3","3.5.2-2ubuntu0~16.04.4","3.5.2-2ubuntu0~16.04.5","3.5.2-2ubuntu0~16.04.8","3.5.2-2ubuntu0~16.04.9","3.5.2-2ubuntu0~16.04.10","3.5.2-2ubuntu0~16.04.11","3.5.2-2ubuntu0~16.04.12","3.5.2-2ubuntu0~16.04.13","3.5.2-2ubuntu0~16.04.13+esm1","3.5.2-2ubuntu0~16.04.13+esm2","3.5.2-2ubuntu0~16.04.13+esm3","3.5.2-2ubuntu0~16.04.13+esm5","3.5.2-2ubuntu0~16.04.13+esm6","3.5.2-2ubuntu0~16.04.13+esm7","3.5.2-2ubuntu0~16.04.13+esm8","3.5.2-2ubuntu0~16.04.13+esm9","3.5.2-2ubuntu0~16.04.13+esm10","3.5.2-2ubuntu0~16.04.13+esm11","3.5.2-2ubuntu0~16.04.13+esm12"],"bundled":41},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.13+esm2"}]}],"versions":["3.6.3-1ubuntu1","3.6.4~rc1-1","3.6.4~rc1-2","3.6.4-1","3.6.4-2","3.6.4-3build1","3.6.4-4","3.6.5~rc1-1","3.6.5-3","3.6.6-1~18.04","3.6.7-1~18.04","3.6.8-1~18.04.1","3.6.8-1~18.04.2","3.6.8-1~18.04.3","3.6.9-1~18.04","3.6.9-1~18.04ubuntu1","3.6.9-1~18.04ubuntu1.1","3.6.9-1~18.04ubuntu1.3","3.6.9-1~18.04ubuntu1.4","3.6.9-1~18.04ubuntu1.6","3.6.9-1~18.04ubuntu1.7","3.6.9-1~18.04ubuntu1.8","3.6.9-1~18.04ubuntu1.9","3.6.9-1~18.04ubuntu1.10","3.6.9-1~18.04ubuntu1.12","3.6.9-1~18.04ubuntu1.13","3.6.9-1~18.04ubuntu1.13+esm1"],"bundled":41},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.5-2ubuntu1~18.04.2+esm3"}]}],"versions":["3.7.0~a2-1","3.7.0~a3-1","3.7.0~a3-2","3.7.0~a3-3","3.7.0~a4-1","3.7.0~b1-1","3.7.0~b1-1build1","3.7.0~b2-1","3.7.0~b3-1","3.7.0-1~18.04","3.7.1-1~18.04","3.7.3-2~18.04.1","3.7.5-2~18.04","3.7.5-2~18.04.4","3.7.5-2ubuntu1~18.04.2","3.7.5-2ubuntu1~18.04.2+esm1","3.7.5-2ubuntu1~18.04.2+esm2"],"bundled":41},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-3ubuntu1~18.04.2+esm2"}]}],"versions":["3.8.0-3~18.04","3.8.0-3~18.04.1","3.8.0-3ubuntu1~18.04.2","3.8.0-3ubuntu1~18.04.2+esm1"],"bundled":41},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"python3.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-0ubuntu1~20.04.10"}]}],"versions":["3.8.0-1","3.8.0-2","3.8.0-3","3.8.0-4","3.8.0-5","3.8.1-2ubuntu3","3.8.2~rc1-1ubuntu1","3.8.2-1","3.8.2-1ubuntu1","3.8.2-1ubuntu1.1","3.8.2-1ubuntu1.2","3.8.5-1~20.04","3.8.5-1~20.04.2","3.8.5-1~20.04.3","3.8.10-0ubuntu1~20.04","3.8.10-0ubuntu1~20.04.1","3.8.10-0ubuntu1~20.04.2","3.8.10-0ubuntu1~20.04.4","3.8.10-0ubuntu1~20.04.5","3.8.10-0ubuntu1~20.04.6","3.8.10-0ubuntu1~20.04.7","3.8.10-0ubuntu1~20.04.8","3.8.10-0ubuntu1~20.04.9"],"bundled":41},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python3.9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.5-3ubuntu0~20.04.1+esm2"}]}],"versions":["3.9.0~rc1-1~20.04","3.9.0-5~20.04","3.9.5-3~20.04.1","3.9.5-3ubuntu0~20.04.1","3.9.5-3ubuntu0~20.04.1+esm1"],"bundled":41},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"python3.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.12-1~22.04.4"}]}],"versions":["3.10.0-2","3.10.0-3","3.10.0-4","3.10.0-5","3.10.0-5build1","3.10.1-1","3.10.1-2","3.10.2-1","3.10.2-5","3.10.2-7","3.10.3-1","3.10.4-3","3.10.4-3ubuntu0.1","3.10.6-1~22.04","3.10.6-1~22.04.1","3.10.6-1~22.04.2","3.10.6-1~22.04.2ubuntu1","3.10.6-1~22.04.2ubuntu1.1","3.10.12-1~22.04.2","3.10.12-1~22.04.3"],"bundled":41},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0~rc1-1~22.04.1~esm1"}]}],"versions":["3.11.0~rc1-1~22.04"],"bundled":41},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"python3.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.12-1~22.04.16"}]}],"versions":["3.10.0-2","3.10.0-3","3.10.0-4","3.10.0-5","3.10.0-5build1","3.10.1-1","3.10.1-2","3.10.2-1","3.10.2-5","3.10.2-7","3.10.3-1","3.10.4-3","3.10.4-3ubuntu0.1","3.10.6-1~22.04","3.10.6-1~22.04.1","3.10.6-1~22.04.2","3.10.6-1~22.04.2ubuntu1","3.10.6-1~22.04.2ubuntu1.1","3.10.12-1~22.04.2","3.10.12-1~22.04.3","3.10.12-1~22.04.4","3.10.12-1~22.04.5","3.10.12-1~22.04.6","3.10.12-1~22.04.7","3.10.12-1~22.04.8","3.10.12-1~22.04.9","3.10.12-1~22.04.10","3.10.12-1~22.04.11","3.10.12-1~22.04.12","3.10.12-1~22.04.13","3.10.12-1~22.04.14","3.10.12-1~22.04.15"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.3-1ubuntu0.15"}]}],"versions":["3.12.0-1","3.12.0-5","3.12.0-6","3.12.0-7","3.12.1-2","3.12.2-1","3.12.2-4build3","3.12.2-4build4","3.12.2-5ubuntu3","3.12.3-1","3.12.3-1ubuntu0.1","3.12.3-1ubuntu0.2","3.12.3-1ubuntu0.3","3.12.3-1ubuntu0.4","3.12.3-1ubuntu0.5","3.12.3-1ubuntu0.6","3.12.3-1ubuntu0.7","3.12.3-1ubuntu0.8","3.12.3-1ubuntu0.9","3.12.3-1ubuntu0.10","3.12.3-1ubuntu0.11","3.12.3-1ubuntu0.12","3.12.3-1ubuntu0.13"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-1ubuntu0.1"}]}],"versions":["3.14.0-1","3.14.0-2","3.14.0-4","3.14.2-1","3.14.3-1","3.14.3-2","3.14.3-3","3.14.3-5","3.14.4-1"],"bundled":18},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.38.2"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python315","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.0~b2-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python314","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.6-1.1"}]}],"bundled":12},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.21-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python316","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.0~a1-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python313-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python313-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python313-nogil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python313-nogil-nogil-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.14-160000.1.1"}]}],"bundled":6}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"netapp","product":"ontap_select_deploy_administration_utility"},{"vendor":"python","product":"python"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"software_collections"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0)"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0)"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp (6es7518-4fx00-1ab0)"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp (6es7518-4fx00-1ac0)"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp (6ag1518-4ax00-4ac0)"}],"references":[{"url":"https://bugs.python.org/issue43285","tags":["x_transferred","Patch","Vendor Advisory","advisory","fix","article","report"]},{"url":"https://python-security.readthedocs.io/vuln/ftplib-pasv.html","tags":["x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"https://github.com/python/cpython/commit/0ab152c6b5d95caa2dc1a30fa96e10258b5f188e","tags":["x_transferred","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-4189","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2036020","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4189","tags":["x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://security.netapp.com/advisory/ntap-20221104-0004/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-457936.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4189","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20221104-0004"},{"url":"https://github.com/advisories/GHSA-67xf-xphq-9mcc"},{"url":"https://access.redhat.com/errata/RHSA-2022:1821","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/1995162","tags":["report"]},{"url":"https://bugzilla.redhat.com/1995234","tags":["report"]},{"url":"https://bugzilla.redhat.com/2006792","tags":["report"]},{"url":"https://bugzilla.redhat.com/2032569","tags":["report"]},{"url":"https://bugzilla.redhat.com/2036020","tags":["report"]},{"url":"https://bugzilla.redhat.com/2047376","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-1821.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-3733","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-3737","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-4189","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-43818","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2022-0391","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-1986.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1649170553","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1649348075","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2022-1653920195.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2022-1654010877.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2022-1654525948.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2022-1654526367.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1790238098.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15806","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3276","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7774","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82049","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8328","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1791919907.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19672","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87910","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0367.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30572","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/UIOJUZ5JMEMGSKNISTOVI4PDP36FDL5Y/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/Y4E2WBEJ42CGLGDHD6ZXOLZ2W6G3YOVD/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/W5664BGZVTA46LQDNTYX5THG6CN4FYJX/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-5519-1","tags":["advisory"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2022-October/012483.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOHEWJI4EPENRFNUSCXL2KZG7QSBH2MJ/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1566","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0391","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3254","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/articles/5860431","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html-single/3.7_release_notes/index#sect-RHSCL-Other-notes","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889886","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889988","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901633","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1918168","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1926226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1928707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1928904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1935913","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1955615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1957458","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1968074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1969523","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3254.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25659","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25659","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25659","tags":["advisory"]},{"url":"https://cryptography.io/en/latest/changelog.html#v3-2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27619","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27619","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27619","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27783","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27783","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27783","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28493","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28493","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28493","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-36242","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36242","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36242","tags":["advisory"]},{"url":"https://cryptography.io/en/latest/changelog.html#v3-3-2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3177","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3177","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3426","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3426","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3426","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3572","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3572","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3572","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3733","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995234","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3733","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3733","tags":["advisory"]},{"url":"https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-14-final","tags":["article"]},{"url":"https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-11-final","tags":["article"]},{"url":"https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-10-final","tags":["article"]},{"url":"https://docs.python.org/3.9/whatsnew/changelog.html#python-3-9-5-final","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4189","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20095","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20095","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20095","tags":["advisory"]},{"url":"https://www.tenable.com/security/research/tra-2021-14","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-23336","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23336","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23336","tags":["advisory"]},{"url":"https://snyk.io/vuln/SNYK-UPSTREAM-PYTHONCPYTHON-1074933","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-28957","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-28957","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28957","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-29921","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-29921","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-29921","tags":["advisory"]},{"url":"https://python-security.readthedocs.io/vuln/ipaddress-ipv4-leading-zeros.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33503","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33503","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33503","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-q2q7-5pp4-w6pg","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-42771","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-42771","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-42771","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2047376","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0391","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1663","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995162","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064442","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1663.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3737","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3737","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3737","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006792","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2032569","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1821.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-43818","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-43818","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43818","tags":["advisory"]},{"url":"https://github.com/lxml/lxml/blob/lxml-4.6.5/CHANGES.txt","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1986","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2003758","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2009200","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1986.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:1821","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220882-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1194146","tags":["report"]},{"url":"https://bugzilla.suse.com/1195396","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0391","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221091-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1175619","tags":["report"]},{"url":"https://bugzilla.suse.com/1186819","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3572","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221140-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1187784","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622959-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1211301","tags":["report"]},{"url":"https://bugzilla.suse.com/1258364","tags":["report"]},{"url":"https://bugzilla.suse.com/1261969","tags":["report"]},{"url":"https://bugzilla.suse.com/1261970","tags":["report"]},{"url":"https://bugzilla.suse.com/1262098","tags":["report"]},{"url":"https://bugzilla.suse.com/1262319","tags":["report"]},{"url":"https://bugzilla.suse.com/1262654","tags":["report"]},{"url":"https://bugzilla.suse.com/1263787","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6100","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623743-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259240","tags":["report"]},{"url":"https://bugzilla.suse.com/1259611","tags":["report"]},{"url":"https://bugzilla.suse.com/1259734","tags":["report"]},{"url":"https://bugzilla.suse.com/1259735","tags":["report"]},{"url":"https://bugzilla.suse.com/1260026","tags":["report"]},{"url":"https://bugzilla.suse.com/1264962","tags":["report"]},{"url":"https://bugzilla.suse.com/1265268","tags":["report"]},{"url":"https://bugzilla.suse.com/1267581","tags":["report"]},{"url":"https://bugzilla.suse.com/1267821","tags":["report"]},{"url":"https://bugzilla.suse.com/1267974","tags":["report"]},{"url":"https://bugzilla.suse.com/1268977","tags":["report"]},{"url":"https://bugzilla.suse.com/1269066","tags":["report"]},{"url":"https://bugzilla.suse.com/1269788","tags":["report"]},{"url":"https://bugzilla.suse.com/1269959","tags":["report"]},{"url":"https://bugzilla.suse.com/1271192","tags":["report"]},{"url":"https://bugzilla.suse.com/1276223","tags":["report"]},{"url":"https://bugzilla.suse.com/1276226","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9669","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264534-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1276227","tags":["report"]},{"url":"https://bugzilla.suse.com/1277111","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19672","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-4189","tags":["report"]},{"url":"https://github.com/python/cpython/commit/7dcb4baa4f0fde3aef5122a8e9f6a41853ec9335","tags":["report"]},{"url":"https://github.com/python/cpython/commit/79373951b3eab585d42e0f0ab83718cbe1d0ee33","tags":["report"]},{"url":"https://github.com/python/cpython/commit/4134f154ae2f621f25c5d698cc0f1748035a1b88","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5342-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5342-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6891-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8509-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-3426","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-0391","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-20107","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-1060","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-1061","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14647","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20406","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20852","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-5010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9636","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9674","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9740","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9947","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9948","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-10160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16056","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16935","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17514","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-18348","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-20907","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-8492","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14422","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-26116","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27619","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3733","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3737","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-29921","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-42919","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-45061","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-48560","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-48564","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-48565","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-48566","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-6507","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-6597","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-24329","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-40217","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-41105","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-0450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-13462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-69534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-0672","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-1299","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-1502","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-2297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-3276","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-3644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-4224","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-4519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-4786","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-5713","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-6019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-6100","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-7774","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-8328","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-9669","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ULIK4RFHGHTVVWROQ6NTBBB4JWOGWYD6/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-15366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-15367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19445","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-4189","description":"A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible.","status":"published","published":"2022-08-24T00:00:00Z","modified":"2026-11-10T12:28:53.292Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-252"],"updated_at":"2026-11-10T13:38:44.039016Z"}],"euvd":[{"id":"EUVD-2021-34049","description":"A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible.","status":"published","published":"2022-08-24T00:00:00Z","modified":"2026-11-10T12:28:53Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-10T13:21:01.211897Z"}],"ghsa":[{"id":"GHSA-67xf-xphq-9mcc","title":"A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...","description":"A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible.","status":"published","published":"2022-08-25T00:00:27Z","modified":"2026-11-10T15:31:23Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-252"],"updated_at":"2026-11-10T15:55:01.006697Z"}],"nvd":[{"id":"CVE-2021-4189","description":"A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible.","status":"published","published":"2022-08-24T16:15:09.827Z","modified":"2026-11-10T13:17:19.117Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-252"],"updated_at":"2026-11-10T16:19:42.81013Z"}],"osv":[{"id":"CVE-2021-4189","description":"A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible.","status":"published","published":"2022-08-24T16:15:09.827Z","modified":"2026-11-10T10:45:09.591354646Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-07T17:50:16.374761Z"},{"id":"DEBIAN-CVE-2021-4189","description":"A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible.","status":"published","published":"2022-08-24T16:15:09.827Z","modified":"2026-11-11T09:47:36.182332343Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-11T10:35:40.696585Z"},{"id":"OESA-2022-1566","title":"python3 security update","description":"Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.\r\n\r\n\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like \u0026apos;\\r\u0026apos; and \u0026apos;\\n\u0026apos; in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14.(CVE-2022-0391)\r\n\r\nAn attacker could exploit this vulnerability to set up a malicious FTP server that could trick an FTP client into connecting back to a given IP address and port. This can cause the FTP client to scan the port.(CVE-2021-4189)","status":"published","published":"2022-03-07T11:04:50Z","modified":"2026-08-18T01:15:43.240999531Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2021:3254","title":"Red Hat Security Advisory: rh-python38 security, bug fix, and enhancement update","status":"published","published":"2024-09-18T05:24:45Z","modified":"2026-10-15T10:02:03Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2022:1663","title":"Red Hat Security Advisory: python27-python and python27-python-pip security update","status":"published","published":"2024-09-13T17:37:07Z","modified":"2026-10-15T10:02:30Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:1821","title":"Red Hat Security Advisory: python27:2.7 security update","status":"published","published":"2024-09-13T17:37:15Z","modified":"2026-10-15T10:02:32Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:1986","title":"Red Hat Security Advisory: python3 security update","status":"published","published":"2024-09-13T17:36:35Z","modified":"2026-06-28T10:51:01Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RLSA-2022:1821","title":"Moderate: python27:2.7 security update","description":"Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL.\n\nSecurity Fix(es):\n\n* python: urllib: Regular expression DoS in AbstractBasicAuthHandler (CVE-2021-3733)\n\n* python: ftplib should not use the host from the PASV response (CVE-2021-4189)\n\n* python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818)\n\n* python: urllib.parse does not sanitize URLs containing ASCII newline and tabs (CVE-2022-0391)\n\n* python: urllib: HTTP client possible infinite loop on a 100 Continue response (CVE-2021-3737)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.","status":"published","published":"2022-05-10T08:02:50Z","modified":"2026-02-04T07:40:25.209685Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2021-4189","description":"A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible.","status":"published","published":"2021-12-31T00:00:00Z","modified":"2026-07-06T16:15:18.480196354Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:29.220315Z"},{"id":"ALSA-2022:1821","title":"Moderate: python27:2.7 security update","description":"Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL.\n\nSecurity Fix(es):\n\n* python: urllib: Regular expression DoS in AbstractBasicAuthHandler (CVE-2021-3733)\n\n* python: ftplib should not use the host from the PASV response (CVE-2021-4189)\n\n* python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818)\n\n* python: urllib.parse does not sanitize URLs containing ASCII newline and tabs (CVE-2022-0391)\n\n* python: urllib: HTTP client possible infinite loop on a 100 Continue response (CVE-2021-3737)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-05-10T08:02:50Z","modified":"2026-10-29T11:01:18.130652049Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"ALSA-2022:1986","title":"Moderate: python3 security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. \n\nSecurity Fix(es):\n\n* python: ftplib should not use the host from the PASV response (CVE-2021-4189)\n\n* python: urllib: HTTP client possible infinite loop on a 100 Continue response (CVE-2021-3737)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-05-10T08:11:33Z","modified":"2026-10-29T11:01:18.91660663Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"BIT-libpython-2021-4189","description":"A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible.","status":"published","published":"2025-08-11T13:51:57.853Z","modified":"2026-09-08T08:48:08.524108918Z","updated_at":"2026-11-02T15:28:32.162822Z"},{"id":"BIT-python-2021-4189","description":"A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible.","status":"published","published":"2024-03-06T11:05:50.693Z","modified":"2026-09-08T08:48:18.92760337Z","updated_at":"2026-11-02T15:28:34.724063Z"},{"id":"BIT-python-min-2021-4189","description":"A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible.","status":"published","published":"2025-01-16T07:22:49.704Z","modified":"2026-09-08T08:48:18.800467445Z","updated_at":"2026-11-02T15:28:34.724063Z"},{"id":"CLSA-2022-1649170553","title":"Fix CVE(s): CVE-2021-4189","description":"\n   * SECURITY UPDATE: Expose sensitive information\n     - debian/patches/CVE-2021-4189.patch: alters ftplib.FTP class\n       behavior to not trust the IPv4 address sent from the remote\n       server when setting up a passive data channel in\n       resposne in Lib/ftplib.py, Lib/test/test_ftplib.py.\n     - CVE-2021-4189","status":"published","published":"2022-04-05T14:55:53Z","modified":"2026-06-04T10:03:45.69427Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1649348075","title":"Fix CVE(s): CVE-2021-4189","description":"\n   * SECURITY UPDATE: Expose sensitive information\n     - debian/patches/CVE-2021-4189.patch: alters ftplib.FTP class\n       behavior to not trust the IPv4 address sent from the remote\n       server when setting up a passive data channel in\n       resposne in Lib/ftplib.py, Lib/test/test_ftplib.py.\n     - CVE-2021-4189","status":"published","published":"2022-04-07T16:14:35Z","modified":"2026-06-04T10:04:15.137612Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1653920195","title":"Fixed CVEs in python3: CVE-2021-3737, CVE-2021-3426, CVE-2021-4189, CVE-2022-0391","description":"- CVE-2021-3426: Remove the pydoc getfile feature which could lead to\n  information disclosure (rhbz#1935913)\n- CVE-2021-3737: urllib: HTTP client possible infinite loop on a 100 Continue\n  response (rhbz#2036020)\n- CVE-2021-4189: ftplib should not use the host from the PASV response\n  (rhbz#2036020)\n- CVE-2022-0391: urllib.parse does not sanitize URLs containing ASCII newline\n  and tabs (rhbz#2047376)","status":"published","published":"2022-05-30T14:16:35Z","modified":"2026-10-21T10:48:23.659582174Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1654010877","title":"Fixed CVEs in python3: CVE-2022-0391, CVE-2021-4189, CVE-2021-3737","description":"- CVE-2021-3737: urllib: HTTP client possible infinite loop on a 100 Continue response (rhbz#2036020)\n- CVE-2021-4189: ftplib should not use the host from the PASV response (rhbz#2036020)\n- CVE-2022-0391: urllib.parse does not sanitize URLs containing ASCII newline and tabs (rhbz#2047376)","status":"published","published":"2022-05-31T15:27:57Z","modified":"2026-10-21T10:47:59.68547168Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1654525948","title":"Fixed CVEs in python2-pip-18.module_el8.4.0+2051+0b56c8de: CVE-2021-3733, CVE-2021-3737, CVE-2022-0391, CVE-2021-4189","description":"\n- CVE-2021-3733: urllib: Regular expression DoS in AbstractBasicAuthHandler (rhbz#2047376)\n- CVE-2021-3737: urllib: HTTP client possible infinite loop on a 100 Continue response (rhbz#2047376)\n- CVE-2021-4189: ftplib should not use the host from the PASV response (rhbz#2047376)\n- CVE-2022-0391: urllib.parse does not sanitize URLs containing ASCII newline and tabs (rhbz#2047376)","status":"published","published":"2022-06-06T14:32:28Z","modified":"2026-10-21T10:48:23.632097874Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1654526367","title":"Fixed CVEs in python-setuptools_scm-6.module_el8.5.0+2050+77770ab7: CVE-2021-4189, CVE-2022-0391, CVE-2021-3733, CVE-2021-3737","description":"\n- CVE-2021-3733: urllib: Regular expression DoS in AbstractBasicAuthHandler (rhbz#2047376)\n- CVE-2021-3737: urllib: HTTP client possible infinite loop on a 100 Continue response (rhbz#2047376)\n- CVE-2021-4189: ftplib should not use the host from the PASV response (rhbz#2047376)\n- CVE-2022-0391: urllib.parse does not sanitize URLs containing ASCII newline and tabs (rhbz#2047376)","status":"published","published":"2022-06-06T14:39:27Z","modified":"2026-10-21T10:47:51.602420162Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2026-1790238098","title":"python3.11: Fix of 5 CVEs","description":"- CVE-2026-3276: sort each combining-character run in unicodedata.normalize() with a\n  counting sort once the run exceeds a length threshold, instead of the quadratic\n  insertion sort, so crafted input with long runs of alternating canonical combining\n  classes can no longer burn CPU\n- CVE-2026-8328: apply the CVE-2021-4189 PASV fix to ftplib.ftpcp() as well, taking the\n  data connection address from the source socket's peer instead of the host the server\n  advertises, unless trust_server_pasv_ipv4_address opts back in\n- CVE-2026-15806: scope urllib.request HTTPPasswordMgr credentials by URL scheme, so\n  credentials registered for an https:// URL are no longer sent over http://; a bare\n  authority still matches any scheme, keeping proxy authentication working\n- CVE-2026-7774: validate the written link target in tarfile's data filter, rejecting a\n  link member that resolves to the destination directory itself and resolving symlink\n  targets against the stripped member name, so crafted link entries can no longer\n  redirect later members outside the destination\n- CVE-2026-82049: resolve the hard-link source with os.path.realpath() in tarfile's\n  makelink_with_filter, so an archive holding a hard link to a symlink can no longer\n  duplicate that symlink to a shallower path whose relative target escapes the\n  destination","status":"published","published":"2026-09-24T08:21:53Z","modified":"2026-10-26T09:43:20.584878624Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1791919907","title":"python3.9: Fix of 4 CVEs","description":"- CVE-2026-8328: stop ftplib.ftpcp() trusting the IPv4 address the source\n  server advertises in its PASV reply, completing the CVE-2021-4189 fix\n- CVE-2026-15806: scope HTTPPasswordMgr credentials by URL scheme, so a\n  credential stored for an https URI is no longer sent to the matching http URI\n- CVE-2026-19672: normalize tar member names containing .. components in the\n  tarfile tar/data extraction filters, so a name that leaves the destination and\n  comes back no longer creates directories outside the destination\n- CVE-2026-87910: honor a None result from the extraction filter when tarfile\n  falls back to extracting a hardlink target, so a rejected member is skipped\n  instead of being written at the link's path","status":"published","published":"2026-10-13T19:32:00Z","modified":"2026-10-26T09:43:44.958765359Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"DLA-2919-1","title":"python2.7 - security update","status":"published","published":"2022-02-12T00:00:00Z","modified":"2026-03-09T01:18:17.022418Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DLA-3432-1","title":"python2.7 - security update","status":"published","published":"2023-05-24T00:00:00Z","modified":"2026-03-09T01:23:24.606944Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DLA-3477-1","title":"python3.7 - security update","status":"published","published":"2023-06-30T00:00:00Z","modified":"2026-03-09T01:18:31.839817Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DLA-3980-1","title":"python3.9 - security update","status":"published","published":"2024-12-02T00:00:00Z","modified":"2026-03-09T01:23:19.627483Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2022-0367","title":"Updated python packages fix security vulnerability","description":"The mailcap module does not add escape characters into commands discovered\nin the system mailcap file. (CVE-2015-20107)\nAllows an attacker to set up a malicious FTP server that can trick FTP\nclients into connecting back to a given IP address and port.\n(CVE-2021-4189)\nThe urlparse method does not sanitize input and allows characters like\n'\\r' and '\\n' in the URL path. This flaw allows an attacker to input a\ncrafted URL, leading to injection attacks.  (CVE-2022-0391)\n","status":"published","published":"2022-10-13T20:05:19Z","modified":"2026-04-16T04:43:05.841235589Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2022:1091-1","title":"Security update for python","description":"This update for python fixes the following issues:\n\n- CVE-2022-0391: Fixed URL sanitization containing ASCII newline and tabs in urlparse (bsc#1195396).\n- CVE-2021-4189: Fixed ftplib not to trust the PASV response (bsc#1194146).\n- CVE-2021-3572: Fixed an improper handling of unicode characters in pip (bsc#1186819).\n","status":"published","published":"2022-04-01T14:59:44Z","modified":"2026-02-04T02:49:39.476879Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:11835-1","title":"python-2.7.18-15.1 on GA media","description":"These are all security issues fixed in the python-2.7.18-15.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:03:51.240294Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"openSUSE-SU-2026:11101-1","title":"python315-3.15.0~b2-1.1 on GA media","description":"These are all security issues fixed in the python315-3.15.0~b2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-22T00:00:00Z","modified":"2026-06-24T09:00:05.161683908Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:11181-1","title":"python314-3.14.6-1.1 on GA media","description":"These are all security issues fixed in the python314-3.14.6-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-02T00:00:00Z","modified":"2026-07-03T11:00:06.800628523Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:11342-1","title":"python313-3.13.14-1.1 on GA media","description":"These are all security issues fixed in the python313-3.13.14-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-22T00:00:00Z","modified":"2026-07-23T09:45:09.493090448Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:11747-1","title":"python310-3.10.21-1.1 on GA media","description":"These are all security issues fixed in the python310-3.10.21-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-10T00:00:00Z","modified":"2026-09-11T18:23:08.958834843Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:11756-1","title":"python311-3.11.16-1.1 on GA media","description":"These are all security issues fixed in the python311-3.11.16-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-11T00:00:00Z","modified":"2026-09-12T10:30:05.928501941Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:11757-1","title":"python312-3.12.14-1.1 on GA media","description":"These are all security issues fixed in the python312-3.12.14-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-11T00:00:00Z","modified":"2026-09-12T10:30:06.111795894Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:12477-1","title":"python316-3.16.0~a1-1.1 on GA media","description":"These are all security issues fixed in the python316-3.16.0~a1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-11-06T00:00:00Z","modified":"2026-11-07T17:23:17.487988893Z","updated_at":"2026-11-07T17:50:39.727056Z"},{"id":"openSUSE-SU-2026:21459-1","title":"Security update for python313, python3","description":"This update for python313, python3 fixes the following issues:\n\nChanges in python313:\n\nUpdate to 3.13.14:\n\n  - Security\n\n    - gh-151159: Bumps the OpenSSL version to 3.0.21 on Android.\n    - gh-150599: Fix a possible stack buffer overflow in bz2 when\n      a bz2.BZ2Decompressor is reused after a decompression\n      error. The decompressor now becomes unusable after libbz2\n      reports an error.\n    - gh-149835: shutil.move() now resolves symlinks via\n      os.path.realpath() when checking whether the destination is\n      inside the source directory, preventing a symlink-based\n      bypass of that guard.\n    - gh-149698: Update bundled libexpat to version 2.8.1 for the\n      fix for CVE 2026-45186.\n    - gh-87451: The ftplib module’s undocumented ftpcp function\n      no longer trusts the IPv4 address value returned from the\n      source server in response to the PASV command by default,\n      completing the fix for CVE-2021-4189. As with ftplib.FTP,\n      the former behavior can be re-enabled by setting the\n      trust_server_pasv_ipv4_address attribute on the source\n      ftplib.FTP instance to True. Thanks to Qi Deng at Aurascape\n      AI for the report.\n    - gh-149486: tarfile.data_filter() now validates link targets\n      using the same normalised value that is written to disk,\n      strips trailing separators from the member name when\n      resolving a symlink’s directory, and rejects link members\n      that would replace the destination directory itself. This\n      closes several path-traversal bypasses of the data\n      extraction filter.\n    - gh-149079: Fix a potential denial of service in\n      unicodedata.normalize(). The canonical ordering step of\n      Unicode normalization used a quadratic-time insertion sort\n      for reordering combining characters, which could be\n      exploited with crafted input containing many combining\n      characters in non-canonical order. Replaced with\n      a linear-time counting sort for long runs.\n    - gh-149018: Improved protection against XML hash-flooding\n      attacks in xml.parsers.expat and xml.etree.ElementTree when\n      Python is compiled with libExpat 2.8.0 or later.\n    - gh-149017: Update bundled libexpat to version 2.8.0.\n    - gh-90309: Base64-encode values when embedding cookies to\n      JavaScript using the http.cookies.BaseCookie.js_output()\n      method to avoid injection and escaping. (bsc#1262654,\n      CVE-2026-6019)\n    - gh-148808: Added buffer boundary check when using nbytes\n      parameter with\n      asyncio.AbstractEventLoop.sock_recvfrom_into(). Only\n      relevant for Windows and the asyncio.ProactorEventLoop.\n    - gh-148395: Fix a dangling input pointer in\n      lzma.LZMADecompressor, bz2.BZ2Decompressor, and internal\n      zlib._ZlibDecompressor when memory allocation fails with\n      MemoryError, which could let a subsequent decompress() call\n      read or write through a stale pointer to the\n      already-released caller buffer. (bsc#1262098,\n      CVE-2026-6100, seems like it has been incompletely applied\n      gh#python/cpython#151605)\n    - gh-148169: A bypass in webbrowser allowed URLs prefixed\n      with %action to pass the dash-prefix safety check\n      (bsc#1262098, CVE-2026-6100).\n    - gh-146581: Fix vulnerability in shutil.unpack_archive() for\n      ZIP files on Windows which allowed to write files outside\n      of the destination tree if the patch in the archive\n      contains a Windows drive prefix. Now such invalid paths\n      will be skipped. Files containing “..” in the name (like\n      “foo..bar”) are no longer skipped.\n    - gh-146333: Fix quadratic backtracking in\n      configparser.RawConfigParser option parsing regexes (OPTCRE\n      and OPTCRE_NV). A crafted configuration line with many\n      whitespace characters could cause excessive CPU usage.\n    - gh-146211: Reject CR/LF characters in tunnel request\n      headers for the HTTPConnection.set_tunnel() method.\n      (bsc#1261969, CVE-2026-1502)\n  - Core and Builtins\n    - gh-151112: Fix a crash in the compiler that could occur\n      when running out of memory.\n    - gh-151126: Fix a crash, when there’s no memory left on\n      a device, which happened in:\n    -     code compilation - _winapi.CreateProcess()\n    - Now these places raise proper MemoryError errors.\n    - gh-150633: Fix the frozen importer accepting module names\n      with embedded null bytes, which caused it to bypass the\n      sys.modules cache and create duplicate module objects.\n    - gh-149156: Fix an intermittent crash after os.fork() when\n      perf trampoline profiling is enabled and the child returns\n      through trampoline frames inherited from the parent\n      process.\n    - gh-149449: Fix a use-after-free crash when the unicodedata\n      module was removed from sys.modules and garbage-collected\n      between calls that decode \\N{...} escapes or use the\n      namereplace codec error handler.\n    - gh-148450: Fix abc.register() so it invalidates type\n      version tags for registered classes.\n    - gh-150207: Fix a crash when a memory allocation fails\n      during tokenizer initialization. A proper MemoryError is\n      now raised instead.\n    - gh-150107: asyncio: sendfile() and sock_sendfile() event\n      loop methods now call file.seek(offset) if file has\n      a seek() method, even if offset is 0 (default value).\n    - gh-150146: Fix a crash on a complex type variable\n      substitution.\n    - from typing import TypeVar;\n      memoryview[TypeVar(\"\")][*typing.Mapping[..., ...]] used to\n      fail due to missing NULL check on _unpack_args C function\n      call.\n    - gh-149590: Fix crash when faulthandler is imported more\n      than once.\n    - gh-149738: sqlite3: Disallow removing row_factory and\n      text_factory attributes of a connection to prevent a crash\n      on a query.\n    - gh-139808: Add branch protections for AArch64 (BTI/PAC) in\n      assembly code used by -X perf_jit (Linux perf profiler\n      integration).\n    - gh-148820: Fix a race in _PyRawMutex on the free-threaded\n      build where a Py_PARK_INTR return from _PySemaphore_Wait\n      could let the waiter destroy its semaphore before the\n      unlocking thread’s _PySemaphore_Wakeup completed, causing\n      a fatal ReleaseSemaphore error.\n    - gh-148653: Forbid marshalling recursive code objects which\n      cannot be correctly unmarshalled.\n    - gh-148390: Fix an undefined behavior in memoryview when\n      using the native boolean format (?) in cast(). Previously,\n      on some common platforms, calling\n      memoryview(b).cast(\"?\").tolist() incorrectly returned\n      [False] instead of [True] for any even byte b. Patch by\n      Bénédikt Tran.\n    - gh-148418: Fix a possible reference leak in a corrupted\n      TYPE_CODE marshal stream.\n    - gh-148222: Fix vectorcall support in types.GenericAlias\n      when the underlying type does not support the vectorcall\n      protocol. Fix possible leaks in types.GenericAlias and\n      types.UnionType in case of memory error.\n    - gh-145376: Fix reference leaks in various unusual error\n      scenarios.\n\n  - C API\n\n    - gh-150907: Fix dynamic_annotations.h header file when built\n      with C++ and Valgrind: add extern \"C++\" scope for the C++\n      template. Patch by Victor Stinner.\n\n  - Build\n\n    - gh-149351: Avoid possible broken macOS framework install\n      names when DESTDIR is specified during builds.\n    - gh-146475: Block Apple Clang from being used to build the\n      JIT as it ships without required LLVM tools.\n    - gh-148535: No longer use the gcc -fprofile-update=atomic\n      flag on i686. The flag has been added to fix a random GCC\n      internal error on PGO build (gh-145801) caused by\n      corruption of profile data (.gcda files). The problem is\n      that it makes the PGO build way slower (up to 47x slower)\n      on i686. Since the GCC internal error was not seen on i686\n      so far, don’t use -fprofile-update=atomic on i686 anymore.\n      Patch by Victor Stinner.\n\n  - Library\n\n    - gh-150913: Fix sqlite3.Blob slice assignment to raise\n      TypeError and IndexError for type and size mismatches\n      respectively, even when the target slice is empty.\n    - gh-143008: Fix race conditions when re-initializing\n      a io.TextIOWrapper object.\n    - gh-150685: Update bundled pip to 26.1.2\n    - gh-150406: Fix a possible crash occurring during socket\n      module initialization when the system is out of memory on\n      platforms without a reentrant gethostbyname.\n    - gh-150372: readline: Fix a potential crash during tab\n      completion caused by an out-of-memory error during module\n      initialization.\n    - gh-150175: Fix race condition in\n      unittest.mock.ThreadingMock where concurrent calls could\n      lose increments to call_count and other attributes due to\n      a missing lock in _increment_mock_call.\n    - gh-84353: Preserve non-UTF-8 encoded filenames when\n      appending to a zipfile.ZipFile. Previously, non-ASCII names\n      stored in a legacy encoding (without the UTF-8 flag bit\n      set) could be corrupted when the central directory was\n      rewritten: they were decoded as cp437 and then re-stored as\n      UTF-8.\n    - gh-149995: Update various docstrings in typing.\n    - gh-88726: The email package now uses standard MIME charset\n      names “gb2312” and “big5” instead of non-standard names\n      “eucgb2312_cn” and “big5_tw”.\n    - gh-149571: Fix the C implementation of\n      xml.etree.ElementTree.Element.itertext(): it no longer\n      emits text for comments and processing instructions.\n    - gh-149921: Fix reference leaks in error paths of the\n      _interpchannels and _interpqueues extension modules.\n    - gh-149801: Add IANA registered names and aliases with\n      leading zeros before number (like IBM00858, CP00858,\n      IBM01140, CP01140) for corresponding codecs.\n    - gh-149701: Fix bad return code from Lib/venv/bin/activate\n      if hashing is disabled\n    - gh-112821: In the REPL, autocompletion might run arbitrary\n      code in the getter of a descriptor. If that getter raised\n      an exception, autocompletion would fail to present any\n      options for the entire object. Autocompletion now works as\n      expected for these objects.\n    - gh-149388: Make asyncio.windows_utils.PipeHandle closing\n      idempotent.\n    - gh-149489: Fix ElementTree serialization to HTML. The\n      content of elements “xmp”, “iframe”, “noembed”, “noframes”,\n      and “plaintext” is no longer escaped. The “plaintext”\n      element no longer have the closing tag.\n    - gh-149377: Update bundled pip to 26.1.1\n    - gh-149231: In tomllib, the number of parts in TOML keys is\n      now limited.\n    - gh-149117: Fix runpy.run_module() and runpy.run_path() to\n      set the name attribute on the ImportError they raise.\n    - gh-149148: ensurepip: Upgrade bundled pip to 26.1. This\n      version fixes the CVE 2026-3219 vulnerability. Patch by\n      Victor Stinner.\n    - gh-148093: Fix an out-of-bounds read of one byte in\n      binascii.a2b_uu(). Raise binascii.Error, instead of reading\n      past the buffer end.\n    - gh-148914: Fix memoization of in-band PickleBuffer in the\n      Python implementation of pickle. Previously, identical\n      PickleBuffers did not preserve identity, and empty writable\n      PickleBuffer memoized an empty bytearray object in place of\n      b'', so the following references to b'' were unpickled as\n      an empty bytearray object.\n    - gh-138907: Support RFC 9309 in urllib.robotparser.\n    - gh-148954: Fix XML injection vulnerability in\n      xmlrpc.client.dumps() where the methodname was not being\n      escaped before interpolation into the XML body.\n    - gh-148801: xml.etree.ElementTree: Fix a crash in\n      Element.__deepcopy__ on deeply nested trees.\n    - gh-148735: xml.etree.ElementTree: Fix a use-after-free in\n      Element.findtext when the element tree is mutated\n      concurrently during the search.\n    - gh-146553: Fix infinite loop in typing.get_type_hints()\n      when __wrapped__ forms a cycle. Patch by Shamil Abdulaev.\n    - gh-148508: An intermittent timing error when running SSL\n      tests on iOS has been resolved.\n    - gh-148518: If an email containing an address header that\n      ended in an open double quote was parsed with\n      a non-compat32 policy, accessing the username attribute of\n      the mailbox accessed through that header object would\n      result in an IndexError. It now correctly returns an empty\n      string as the result.\n    - gh-148370: configparser: prevent quadratic behavior when\n      a ParsingError is raised after a parser fails to parse\n      multiple lines. Patch by Bénédikt Tran.\n    - gh-148254: Use singular “sec” instead of “secs” in timeit\n      verbose output for consistency with other time units.\n    - gh-148192: email.generator.Generator._make_boundary could\n      fail to detect a duplicate boundary string if linesep was\n      not n. It now correctly detects boundary strings when\n      linesep is rn as well.\n    - gh-146313: Fix a deadlock in multiprocessing’s resource\n      tracker where the parent process could hang indefinitely in\n      os.waitpid() during interpreter shutdown if a child created\n      via os.fork() still held the resource tracker’s pipe open.\n    - gh-145831: Fix email.quoprimime.decode() leaving a stray \\r\n      when eol='\\r\\n' by stripping the full eol string instead of\n      one character.\n    - gh-145105: Fix crash in csv reader when iterating with\n      a re-entrant iterator that calls next() on the same reader\n      from within __next__.\n    - gh-130750: Restore quoting of choices in argparse error\n      messages for improved clarity and consistency with\n      documentation.\n    - gh-105936: Attempting to mutate non-field attributes of\n      dataclasses with both frozen and slots being True now\n      raises FrozenInstanceError instead of TypeError. Their\n      non-dataclass subclasses can now freely mutate non-field\n      attributes, and the original non-slotted class can be\n      garbage collected. The fix also handles the case of an\n      empty __class__ cell on a function found within the class\n      (gh-148947).\n    - gh-142516: ssl: fix reference leaks in ssl.SSLContext\n      objects. Patch by Bénédikt Tran.\n    - gh-142831: Fix a crash in the json module where\n      a use-after-free could occur if the object being encoded is\n      modified during serialization.\n    - gh-140287: The asyncio REPL now handles exceptions when\n      executing PYTHONSTARTUP scripts. Patch by Bartosz Sławecki.\n    - gh-90949: Add\n      SetBillionLaughsAttackProtectionActivationThreshold() and\n      SetBillionLaughsAttackProtectionMaximumAmplification() to\n      xmlparser objects to tune protections against billion\n      laughs attacks. Patch by Bénédikt Tran.\n    - gh-132631: Fix “I/O operation on closed file” when parsing\n      JSON Lines file with JSON CLI.\n    - gh-128110: Fix bug in the parsing of email address headers\n      that could result in extraneous spaces in the decoded text\n      when using a modern email policy. Space between pairs of\n      adjacent RFC 2047 encoded-words is now ignored, per section\n      6.2 (and consistent with existing parsing of unstructured\n      headers like Subject).\n    - gh-107398: Fix tarfile stream mode exception when process\n      the file with the gzip extra field.\n    - gh-123853: Update the table of Windows language code\n      identifiers (LCIDs) used by locale.getdefaultlocale() on\n      Windows to protocol version 16.0 (2024-04-23).\n    - gh-70039: Fixed bug where smtplib.SMTP.starttls() could\n      fail if smtplib.SMTP.connect() is called explicitly rather\n      than implicitly.\n    - gh-83281: email: improve handling trailing garbage in\n      address lists to avoid throwing AttributeError in certain\n      edge cases\n    - gh-91099: imaplib.IMAP4.login() now raises exceptions with\n      str instead of bytes. Patch by Florian Best.\n  - IDLE\n    - bpo-6699: Warn the user if a file will be overwritten when\n      saving.\n  - Documentation\n    - gh-150319: Generic builtin and standard library types now\n      document the meaning of their type parameters.\n    - gh-148663: Document that calendar.IllegalMonthError is\n      a subclass of both ValueError and IndexError since Python\n      3.12.\n    - gh-146646: Document that glob.glob(), glob.iglob(),\n      pathlib.Path.glob(), and pathlib.Path.rglob() silently\n      suppress OSError exceptions raised from scanning the\n      filesystem.\n    - gh-109503: Fix documentation for shutil.move() on usage of\n      os.rename() since nonatomic move might be used even if the\n      files are on the same filesystem. Patch by Fang Li\n  - Tests\n    - gh-151130: Add more tests for PyWeakref_* C API.\n    - gh-149776: Fix test_socket on Linux kernel 7.1 and newer:\n      skip UDP Lite tests if it’s not supported. Patch by Victor\n      Stinner.\n\n- Keep unversioned Python 3 development entry points in\n  python3-devel: python313-devel no longer provides python3-devel\n  and no longer owns libpython3.so, python3-config, python3.pc,\n  or python3-embed.pc. Do not package versioned GIL pkg-config\n  files in nogil-devel. Also, fix regular expressions in\n  rpmlintrc.\n\n- Improve testing for the support of IPPROTO_UDPLITE, which could be\n  not present although header files are. (bsc#1263787,\n  gh#python/cpython!149081)\n\n- Add missing BR `crypto-policies-scripts` (need for the fix of\n  bsc#1211301).\n\n- CVE-2026-6019: protect against HTML injection by\n  Base64-encoding cookie values embedded in JS (bsc#1262654,\n  gh#python/cpython#90309)\n\n- CVE-2026-1502: reject CR/LF in HTTP tunnel request headers\n  (bsc#1261969, gh#python/cpython#146211)\n\n- CVE-2026-4786: fix webbrowser %action substitution bypass of\n  dash-prefix check (bsc#1262319, gh#python/cpython#148169)\n\n- CVE-2026-6100: prevent dangling pointer, which can end in the\n  use-after-free error (bsc#1262098, gh#python/cpython#148395)\n\nChanges in python3:\n\n- Provide explicitly also file dependencies /usr/bin/python3 and\n  /usr/bin/pydoc3.\n\nbreak bootstrap build dependency cycle on primary python\n\nBreak the cyclic build dependency loop between `python3` and\n`python313` during version upgrades (such as 3.13.13 to 3.13.14).\n\nPreviously, `python3.spec` required `BuildRequires:\n%{primary_python}` (the versioned non-base interpreter package)\nand queried its version via `rpm -q` during spec file parsing.\nDuring upgrades, this blocked the build of `python3` because\n`%{primary_python}` (non-base) depended on `python3-base`, which\ndemanded the new `python313-base` version.\n\nSince the unversioned compatibility package `python3` only\ncreates unversioned symlinks (like `/usr/bin/python3`) and owns\ngeneric RPM macros, it does not actually require the versioned\nstandard library modules (the non-base flavor) to build.\n\nThis change allows `python3` to build successfully against the\nalready built `python313-base` and `python313-devel` packages,\nbreaking the circular dependency and enabling a clean upgrade\npath.\n\n- Let python3-devel explicitly provide pkgconfig(python3) and\n  pkgconfig(python3-embed), matching its ownership of the unversioned\n  pkg-config files.\n\n- Complete the transition of the unversioned python3 namespace\n  (jsc#PED-16123, bsc#1258364).\n- Add missing Provides/Obsoletes for generic names.\n- Add macros.python3 (moved from python313).\n\n- Add BuildIgnore: gdb\n  BuildRequires: python313-devel → python313-devel owns\n  /usr/share/gdb/auto-load/...libpython3.13...-gdb.py → the\n  currently published version of that file has #!/usr/bin/python3\n  → RPM auto-generated Requires: python3-base on gdb → OBS tries\n  to install gdb into the build root and fails because\n  python3-base is the package being built.\n- Correct the logic in the %pre scripts.\n- version of the package must be equal to the version of\n  %primary_python\n\n- Initial packaging effort for the python3 superpackage.\n\npython3 is shipped as new package.\n","status":"published","published":"2026-07-28T09:32:02Z","modified":"2026-07-30T18:24:15.428270943Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2022:0882-1","title":"Security update for python3","description":"This update for python3 fixes the following issues:\n\n- CVE-2021-4189: Fixed default access from PASV response in the FTP client (bsc#1194146).\n- CVE-2022-0391: Fixed sanitizing of URLs containing ASCII newline and tabs in urlparse (bsc#1195396).\n","status":"published","published":"2022-03-16T13:44:02Z","modified":"2026-02-04T02:42:50.97609Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:1091-1","title":"Security update for python","description":"This update for python fixes the following issues:\n\n- CVE-2022-0391: Fixed URL sanitization containing ASCII newline and tabs in urlparse (bsc#1195396).\n- CVE-2021-4189: Fixed ftplib not to trust the PASV response (bsc#1194146).\n- CVE-2021-3572: Fixed an improper handling of unicode characters in pip (bsc#1186819).\n","status":"published","published":"2022-04-01T14:59:23Z","modified":"2026-02-04T03:44:36.832753Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1140-1","title":"Security update for python","description":"\nThis update for python rebuilds python against a symbol versioned openssl 1.0.2\nto allow usage with openssl 1.1.1.\n\nAlso the following security issues are fixed:\n\n- CVE-2022-0391: Fixed sanitizing URLs containing ASCII newline and tabs in urlparse (bsc#1195396).\n- CVE-2021-4189: Make ftplib not trust the PASV response (bsc#1194146).\n","status":"published","published":"2022-04-08T14:30:53Z","modified":"2026-02-04T04:18:59.237245Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2026:22959-1","title":"Security update for python313, python3","description":"This update for python313, python3 fixes the following issues:\n\nChanges in python313:\n\nUpdate to 3.13.14:\n\n  - Security\n\n    - gh-151159: Bumps the OpenSSL version to 3.0.21 on Android.\n    - gh-150599: Fix a possible stack buffer overflow in bz2 when\n      a bz2.BZ2Decompressor is reused after a decompression\n      error. The decompressor now becomes unusable after libbz2\n      reports an error.\n    - gh-149835: shutil.move() now resolves symlinks via\n      os.path.realpath() when checking whether the destination is\n      inside the source directory, preventing a symlink-based\n      bypass of that guard.\n    - gh-149698: Update bundled libexpat to version 2.8.1 for the\n      fix for CVE 2026-45186.\n    - gh-87451: The ftplib module’s undocumented ftpcp function\n      no longer trusts the IPv4 address value returned from the\n      source server in response to the PASV command by default,\n      completing the fix for CVE-2021-4189. As with ftplib.FTP,\n      the former behavior can be re-enabled by setting the\n      trust_server_pasv_ipv4_address attribute on the source\n      ftplib.FTP instance to True. Thanks to Qi Deng at Aurascape\n      AI for the report.\n    - gh-149486: tarfile.data_filter() now validates link targets\n      using the same normalised value that is written to disk,\n      strips trailing separators from the member name when\n      resolving a symlink’s directory, and rejects link members\n      that would replace the destination directory itself. This\n      closes several path-traversal bypasses of the data\n      extraction filter.\n    - gh-149079: Fix a potential denial of service in\n      unicodedata.normalize(). The canonical ordering step of\n      Unicode normalization used a quadratic-time insertion sort\n      for reordering combining characters, which could be\n      exploited with crafted input containing many combining\n      characters in non-canonical order. Replaced with\n      a linear-time counting sort for long runs.\n    - gh-149018: Improved protection against XML hash-flooding\n      attacks in xml.parsers.expat and xml.etree.ElementTree when\n      Python is compiled with libExpat 2.8.0 or later.\n    - gh-149017: Update bundled libexpat to version 2.8.0.\n    - gh-90309: Base64-encode values when embedding cookies to\n      JavaScript using the http.cookies.BaseCookie.js_output()\n      method to avoid injection and escaping. (bsc#1262654,\n      CVE-2026-6019)\n    - gh-148808: Added buffer boundary check when using nbytes\n      parameter with\n      asyncio.AbstractEventLoop.sock_recvfrom_into(). Only\n      relevant for Windows and the asyncio.ProactorEventLoop.\n    - gh-148395: Fix a dangling input pointer in\n      lzma.LZMADecompressor, bz2.BZ2Decompressor, and internal\n      zlib._ZlibDecompressor when memory allocation fails with\n      MemoryError, which could let a subsequent decompress() call\n      read or write through a stale pointer to the\n      already-released caller buffer. (bsc#1262098,\n      CVE-2026-6100, seems like it has been incompletely applied\n      gh#python/cpython#151605)\n    - gh-148169: A bypass in webbrowser allowed URLs prefixed\n      with %action to pass the dash-prefix safety check\n      (bsc#1262098, CVE-2026-6100).\n    - gh-146581: Fix vulnerability in shutil.unpack_archive() for\n      ZIP files on Windows which allowed to write files outside\n      of the destination tree if the patch in the archive\n      contains a Windows drive prefix. Now such invalid paths\n      will be skipped. Files containing “..” in the name (like\n      “foo..bar”) are no longer skipped.\n    - gh-146333: Fix quadratic backtracking in\n      configparser.RawConfigParser option parsing regexes (OPTCRE\n      and OPTCRE_NV). A crafted configuration line with many\n      whitespace characters could cause excessive CPU usage.\n    - gh-146211: Reject CR/LF characters in tunnel request\n      headers for the HTTPConnection.set_tunnel() method.\n      (bsc#1261969, CVE-2026-1502)\n  - Core and Builtins\n    - gh-151112: Fix a crash in the compiler that could occur\n      when running out of memory.\n    - gh-151126: Fix a crash, when there’s no memory left on\n      a device, which happened in:\n    -     code compilation - _winapi.CreateProcess()\n    - Now these places raise proper MemoryError errors.\n    - gh-150633: Fix the frozen importer accepting module names\n      with embedded null bytes, which caused it to bypass the\n      sys.modules cache and create duplicate module objects.\n    - gh-149156: Fix an intermittent crash after os.fork() when\n      perf trampoline profiling is enabled and the child returns\n      through trampoline frames inherited from the parent\n      process.\n    - gh-149449: Fix a use-after-free crash when the unicodedata\n      module was removed from sys.modules and garbage-collected\n      between calls that decode \\N{...} escapes or use the\n      namereplace codec error handler.\n    - gh-148450: Fix abc.register() so it invalidates type\n      version tags for registered classes.\n    - gh-150207: Fix a crash when a memory allocation fails\n      during tokenizer initialization. A proper MemoryError is\n      now raised instead.\n    - gh-150107: asyncio: sendfile() and sock_sendfile() event\n      loop methods now call file.seek(offset) if file has\n      a seek() method, even if offset is 0 (default value).\n    - gh-150146: Fix a crash on a complex type variable\n      substitution.\n    - from typing import TypeVar;\n      memoryview[TypeVar(\"\")][*typing.Mapping[..., ...]] used to\n      fail due to missing NULL check on _unpack_args C function\n      call.\n    - gh-149590: Fix crash when faulthandler is imported more\n      than once.\n    - gh-149738: sqlite3: Disallow removing row_factory and\n      text_factory attributes of a connection to prevent a crash\n      on a query.\n    - gh-139808: Add branch protections for AArch64 (BTI/PAC) in\n      assembly code used by -X perf_jit (Linux perf profiler\n      integration).\n    - gh-148820: Fix a race in _PyRawMutex on the free-threaded\n      build where a Py_PARK_INTR return from _PySemaphore_Wait\n      could let the waiter destroy its semaphore before the\n      unlocking thread’s _PySemaphore_Wakeup completed, causing\n      a fatal ReleaseSemaphore error.\n    - gh-148653: Forbid marshalling recursive code objects which\n      cannot be correctly unmarshalled.\n    - gh-148390: Fix an undefined behavior in memoryview when\n      using the native boolean format (?) in cast(). Previously,\n      on some common platforms, calling\n      memoryview(b).cast(\"?\").tolist() incorrectly returned\n      [False] instead of [True] for any even byte b. Patch by\n      Bénédikt Tran.\n    - gh-148418: Fix a possible reference leak in a corrupted\n      TYPE_CODE marshal stream.\n    - gh-148222: Fix vectorcall support in types.GenericAlias\n      when the underlying type does not support the vectorcall\n      protocol. Fix possible leaks in types.GenericAlias and\n      types.UnionType in case of memory error.\n    - gh-145376: Fix reference leaks in various unusual error\n      scenarios.\n\n  - C API\n\n    - gh-150907: Fix dynamic_annotations.h header file when built\n      with C++ and Valgrind: add extern \"C++\" scope for the C++\n      template. Patch by Victor Stinner.\n\n  - Build\n\n    - gh-149351: Avoid possible broken macOS framework install\n      names when DESTDIR is specified during builds.\n    - gh-146475: Block Apple Clang from being used to build the\n      JIT as it ships without required LLVM tools.\n    - gh-148535: No longer use the gcc -fprofile-update=atomic\n      flag on i686. The flag has been added to fix a random GCC\n      internal error on PGO build (gh-145801) caused by\n      corruption of profile data (.gcda files). The problem is\n      that it makes the PGO build way slower (up to 47x slower)\n      on i686. Since the GCC internal error was not seen on i686\n      so far, don’t use -fprofile-update=atomic on i686 anymore.\n      Patch by Victor Stinner.\n\n  - Library\n\n    - gh-150913: Fix sqlite3.Blob slice assignment to raise\n      TypeError and IndexError for type and size mismatches\n      respectively, even when the target slice is empty.\n    - gh-143008: Fix race conditions when re-initializing\n      a io.TextIOWrapper object.\n    - gh-150685: Update bundled pip to 26.1.2\n    - gh-150406: Fix a possible crash occurring during socket\n      module initialization when the system is out of memory on\n      platforms without a reentrant gethostbyname.\n    - gh-150372: readline: Fix a potential crash during tab\n      completion caused by an out-of-memory error during module\n      initialization.\n    - gh-150175: Fix race condition in\n      unittest.mock.ThreadingMock where concurrent calls could\n      lose increments to call_count and other attributes due to\n      a missing lock in _increment_mock_call.\n    - gh-84353: Preserve non-UTF-8 encoded filenames when\n      appending to a zipfile.ZipFile. Previously, non-ASCII names\n      stored in a legacy encoding (without the UTF-8 flag bit\n      set) could be corrupted when the central directory was\n      rewritten: they were decoded as cp437 and then re-stored as\n      UTF-8.\n    - gh-149995: Update various docstrings in typing.\n    - gh-88726: The email package now uses standard MIME charset\n      names “gb2312” and “big5” instead of non-standard names\n      “eucgb2312_cn” and “big5_tw”.\n    - gh-149571: Fix the C implementation of\n      xml.etree.ElementTree.Element.itertext(): it no longer\n      emits text for comments and processing instructions.\n    - gh-149921: Fix reference leaks in error paths of the\n      _interpchannels and _interpqueues extension modules.\n    - gh-149801: Add IANA registered names and aliases with\n      leading zeros before number (like IBM00858, CP00858,\n      IBM01140, CP01140) for corresponding codecs.\n    - gh-149701: Fix bad return code from Lib/venv/bin/activate\n      if hashing is disabled\n    - gh-112821: In the REPL, autocompletion might run arbitrary\n      code in the getter of a descriptor. If that getter raised\n      an exception, autocompletion would fail to present any\n      options for the entire object. Autocompletion now works as\n      expected for these objects.\n    - gh-149388: Make asyncio.windows_utils.PipeHandle closing\n      idempotent.\n    - gh-149489: Fix ElementTree serialization to HTML. The\n      content of elements “xmp”, “iframe”, “noembed”, “noframes”,\n      and “plaintext” is no longer escaped. The “plaintext”\n      element no longer have the closing tag.\n    - gh-149377: Update bundled pip to 26.1.1\n    - gh-149231: In tomllib, the number of parts in TOML keys is\n      now limited.\n    - gh-149117: Fix runpy.run_module() and runpy.run_path() to\n      set the name attribute on the ImportError they raise.\n    - gh-149148: ensurepip: Upgrade bundled pip to 26.1. This\n      version fixes the CVE 2026-3219 vulnerability. Patch by\n      Victor Stinner.\n    - gh-148093: Fix an out-of-bounds read of one byte in\n      binascii.a2b_uu(). Raise binascii.Error, instead of reading\n      past the buffer end.\n    - gh-148914: Fix memoization of in-band PickleBuffer in the\n      Python implementation of pickle. Previously, identical\n      PickleBuffers did not preserve identity, and empty writable\n      PickleBuffer memoized an empty bytearray object in place of\n      b'', so the following references to b'' were unpickled as\n      an empty bytearray object.\n    - gh-138907: Support RFC 9309 in urllib.robotparser.\n    - gh-148954: Fix XML injection vulnerability in\n      xmlrpc.client.dumps() where the methodname was not being\n      escaped before interpolation into the XML body.\n    - gh-148801: xml.etree.ElementTree: Fix a crash in\n      Element.__deepcopy__ on deeply nested trees.\n    - gh-148735: xml.etree.ElementTree: Fix a use-after-free in\n      Element.findtext when the element tree is mutated\n      concurrently during the search.\n    - gh-146553: Fix infinite loop in typing.get_type_hints()\n      when __wrapped__ forms a cycle. Patch by Shamil Abdulaev.\n    - gh-148508: An intermittent timing error when running SSL\n      tests on iOS has been resolved.\n    - gh-148518: If an email containing an address header that\n      ended in an open double quote was parsed with\n      a non-compat32 policy, accessing the username attribute of\n      the mailbox accessed through that header object would\n      result in an IndexError. It now correctly returns an empty\n      string as the result.\n    - gh-148370: configparser: prevent quadratic behavior when\n      a ParsingError is raised after a parser fails to parse\n      multiple lines. Patch by Bénédikt Tran.\n    - gh-148254: Use singular “sec” instead of “secs” in timeit\n      verbose output for consistency with other time units.\n    - gh-148192: email.generator.Generator._make_boundary could\n      fail to detect a duplicate boundary string if linesep was\n      not n. It now correctly detects boundary strings when\n      linesep is rn as well.\n    - gh-146313: Fix a deadlock in multiprocessing’s resource\n      tracker where the parent process could hang indefinitely in\n      os.waitpid() during interpreter shutdown if a child created\n      via os.fork() still held the resource tracker’s pipe open.\n    - gh-145831: Fix email.quoprimime.decode() leaving a stray \\r\n      when eol='\\r\\n' by stripping the full eol string instead of\n      one character.\n    - gh-145105: Fix crash in csv reader when iterating with\n      a re-entrant iterator that calls next() on the same reader\n      from within __next__.\n    - gh-130750: Restore quoting of choices in argparse error\n      messages for improved clarity and consistency with\n      documentation.\n    - gh-105936: Attempting to mutate non-field attributes of\n      dataclasses with both frozen and slots being True now\n      raises FrozenInstanceError instead of TypeError. Their\n      non-dataclass subclasses can now freely mutate non-field\n      attributes, and the original non-slotted class can be\n      garbage collected. The fix also handles the case of an\n      empty __class__ cell on a function found within the class\n      (gh-148947).\n    - gh-142516: ssl: fix reference leaks in ssl.SSLContext\n      objects. Patch by Bénédikt Tran.\n    - gh-142831: Fix a crash in the json module where\n      a use-after-free could occur if the object being encoded is\n      modified during serialization.\n    - gh-140287: The asyncio REPL now handles exceptions when\n      executing PYTHONSTARTUP scripts. Patch by Bartosz Sławecki.\n    - gh-90949: Add\n      SetBillionLaughsAttackProtectionActivationThreshold() and\n      SetBillionLaughsAttackProtectionMaximumAmplification() to\n      xmlparser objects to tune protections against billion\n      laughs attacks. Patch by Bénédikt Tran.\n    - gh-132631: Fix “I/O operation on closed file” when parsing\n      JSON Lines file with JSON CLI.\n    - gh-128110: Fix bug in the parsing of email address headers\n      that could result in extraneous spaces in the decoded text\n      when using a modern email policy. Space between pairs of\n      adjacent RFC 2047 encoded-words is now ignored, per section\n      6.2 (and consistent with existing parsing of unstructured\n      headers like Subject).\n    - gh-107398: Fix tarfile stream mode exception when process\n      the file with the gzip extra field.\n    - gh-123853: Update the table of Windows language code\n      identifiers (LCIDs) used by locale.getdefaultlocale() on\n      Windows to protocol version 16.0 (2024-04-23).\n    - gh-70039: Fixed bug where smtplib.SMTP.starttls() could\n      fail if smtplib.SMTP.connect() is called explicitly rather\n      than implicitly.\n    - gh-83281: email: improve handling trailing garbage in\n      address lists to avoid throwing AttributeError in certain\n      edge cases\n    - gh-91099: imaplib.IMAP4.login() now raises exceptions with\n      str instead of bytes. Patch by Florian Best.\n  - IDLE\n    - bpo-6699: Warn the user if a file will be overwritten when\n      saving.\n  - Documentation\n    - gh-150319: Generic builtin and standard library types now\n      document the meaning of their type parameters.\n    - gh-148663: Document that calendar.IllegalMonthError is\n      a subclass of both ValueError and IndexError since Python\n      3.12.\n    - gh-146646: Document that glob.glob(), glob.iglob(),\n      pathlib.Path.glob(), and pathlib.Path.rglob() silently\n      suppress OSError exceptions raised from scanning the\n      filesystem.\n    - gh-109503: Fix documentation for shutil.move() on usage of\n      os.rename() since nonatomic move might be used even if the\n      files are on the same filesystem. Patch by Fang Li\n  - Tests\n    - gh-151130: Add more tests for PyWeakref_* C API.\n    - gh-149776: Fix test_socket on Linux kernel 7.1 and newer:\n      skip UDP Lite tests if it’s not supported. Patch by Victor\n      Stinner.\n\n- Keep unversioned Python 3 development entry points in\n  python3-devel: python313-devel no longer provides python3-devel\n  and no longer owns libpython3.so, python3-config, python3.pc,\n  or python3-embed.pc. Do not package versioned GIL pkg-config\n  files in nogil-devel. Also, fix regular expressions in\n  rpmlintrc.\n\n- Improve testing for the support of IPPROTO_UDPLITE, which could be\n  not present although header files are. (bsc#1263787,\n  gh#python/cpython!149081)\n\n- Add missing BR `crypto-policies-scripts` (need for the fix of\n  bsc#1211301).\n\n- CVE-2026-6019: protect against HTML injection by\n  Base64-encoding cookie values embedded in JS (bsc#1262654,\n  gh#python/cpython#90309)\n\n- CVE-2026-1502: reject CR/LF in HTTP tunnel request headers\n  (bsc#1261969, gh#python/cpython#146211)\n\n- CVE-2026-4786: fix webbrowser %action substitution bypass of\n  dash-prefix check (bsc#1262319, gh#python/cpython#148169)\n\n- CVE-2026-6100: prevent dangling pointer, which can end in the\n  use-after-free error (bsc#1262098, gh#python/cpython#148395)\n\nChanges in python3:\n\n- Provide explicitly also file dependencies /usr/bin/python3 and\n  /usr/bin/pydoc3.\n\nbreak bootstrap build dependency cycle on primary python\n\nBreak the cyclic build dependency loop between `python3` and\n`python313` during version upgrades (such as 3.13.13 to 3.13.14).\n\nPreviously, `python3.spec` required `BuildRequires:\n%{primary_python}` (the versioned non-base interpreter package)\nand queried its version via `rpm -q` during spec file parsing.\nDuring upgrades, this blocked the build of `python3` because\n`%{primary_python}` (non-base) depended on `python3-base`, which\ndemanded the new `python313-base` version.\n\nSince the unversioned compatibility package `python3` only\ncreates unversioned symlinks (like `/usr/bin/python3`) and owns\ngeneric RPM macros, it does not actually require the versioned\nstandard library modules (the non-base flavor) to build.\n\nThis change allows `python3` to build successfully against the\nalready built `python313-base` and `python313-devel` packages,\nbreaking the circular dependency and enabling a clean upgrade\npath.\n\n- Let python3-devel explicitly provide pkgconfig(python3) and\n  pkgconfig(python3-embed), matching its ownership of the unversioned\n  pkg-config files.\n\n- Complete the transition of the unversioned python3 namespace\n  (jsc#PED-16123, bsc#1258364).\n- Add missing Provides/Obsoletes for generic names.\n- Add macros.python3 (moved from python313).\n\n- Add BuildIgnore: gdb\n  BuildRequires: python313-devel → python313-devel owns\n  /usr/share/gdb/auto-load/...libpython3.13...-gdb.py → the\n  currently published version of that file has #!/usr/bin/python3\n  → RPM auto-generated Requires: python3-base on gdb → OBS tries\n  to install gdb into the build root and fails because\n  python3-base is the package being built.\n- Correct the logic in the %pre scripts.\n- version of the package must be equal to the version of\n  %primary_python\n\n- Initial packaging effort for the python3 superpackage.\n\npython3 is shipped as new package.\n","status":"published","published":"2026-07-28T09:53:01Z","modified":"2026-08-04T18:23:40.472178647Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23743-1","title":"Security update for python311","description":"This update for python311 fixes the following issues:\n\n- CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611).\n- CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the\n  `configparser` module is used (bsc#1269066).\n- CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF (bsc#1261969).\n- CVE-2026-2297: cpython: incorrectly handled hook in FileLoader can lead to validation bypass (bsc#1259240).\n- CVE-2026-3276: quadratic complexity in `unicodedata.normalize()` can lead to DoS when processing specially crafted\n  Unicode input (bsc#1267581).\n- CVE-2026-3644: incomplete control character validation in http.cookies (bsc#1259734).\n- CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735).\n- CVE-2026-4360: in the Tarfile.extract() function, the filter parameter is not passed properly when extracting\n  hardlinks (bsc#1269959).\n- CVE-2026-4519: leading dashes in URLs are accepted by the `webbrowser.open()` API and allow for web browser command\n  line option injection (bsc#1260026).\n- CVE-2026-4786: Incomplete mitigation of %action expansion for command injection to webbrowser.open() (bsc#1262319).\n- CVE-2026-6100: Arbitrary code execution or information disclosure via use-after-free in decompression modules\n  (bsc#1262098).\n- CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding\n  protection (bsc#1264962).\n- CVE-2026-7774: `tarfile.data_filter` path traversal bypass allows writing outside the extraction directory\n  (bsc#1267821).\n- CVE-2026-8328: `ftpcp()` does not use actual peer address and trusts server-supplied PASV host address (bsc#1265268).\n- CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974).\n- CVE-2026-11940: tarfile extraction filter bypass via a crafted archive allows escaping the destination directory and\n  enables arbitrary file reads and writes (bsc#1268977).\n- CVE-2026-11972: infinite loop due to improper EOF handling in the tarfile module streaming mode can lead to DoS\n  (bsc#1269788).\n- CVE-2026-15308: Incremental HTMLParser allows CPU-exhaustion DoS via repeated unterminated markup declarations\n  (bsc#1271192).\n- CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another\n  scheme (bsc#1276223).\n- CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226).\n\nChanges for python311:\n\n- Update to 3.11.16:\n - Build\n - gh-153438: Update Windows build and installer tooling and\n documentation to use the current download URL for\n nuget.exe.\n - Library\n - gh-109638: Fix exponential time in csv.Sniffer.sniff() for\n a sample which contains many quote characters. A doubled\n quote character is now also detected in a field which\n contains the delimiter or a line break.\n - gh-98820: Fix quadratic time in csv.Sniffer.sniff() for\n a sample which contains quoted fields, in particular for\n a single column of quoted fields.\n - gh-149231: In tomllib, the number of parts in TOML keys is\n now limited.\n - gh-146083: Update bundled libexpat to version 2.7.5.\n - gh-141707: Don't change tarfile.TarInfo type from AREGTYPE\n to DIRTYPE when parsing GNU long name or link headers\n (bsc#1259611, CVE-2025-13462).\n - gh-90949: Add\n SetBillionLaughsAttackProtectionActivationThreshold() and\n SetBillionLaughsAttackProtectionMaximumAmplification() to\n xmlparser objects to tune protections against billion\n laughs attacks. Patch by B�n�dikt Tran.\n - gh-100372: ssl.SSLContext.load_verify_locations() no longer\n incorrectly accepts some cases of trailing data when\n parsing DER.\n - Security\n - gh-155558: Update bundled libexpat to version 2.8.3 for the\n fix to CVE-2026-72522.\n - gh-153030: Fixed quadratic complexity in incremental\n parsing of long unterminated constructs (such as tags or\n comments) in html.parser.HTMLParser, which could be\n exploited for a denial of service (bsc#1271192,\n CVE-2026-15308).\n - gh-152674: The xml.etree.ElementTree.Element methods\n findall(), iterfind() and find() avoid quadratic behavior\n when using XPath index predicates ([1], [last()],\n [last()-N]) on XML documents with many same-tag siblings.\n - gh-152216: Update bundled libexpat to version 2.8.2.\n - gh-151987: The tarfile.TarFile.extract() method now applies\n the given filter when it extracts a link target from the\n archive as a fallback (bsc#1269959, CVE-2026-4360).\n - gh-151981: In tarfile, seeking a stream now stops when end\n of the stream is reached (bsc#1269788, CVE-2026-11972).\n - gh-151544: Modules/Setup.local is no longer used as\n a landmark to discover whether Python is running in\n a source tree, as it could potentially affect actual\n installs. The pybuilddir.txt file is now the sole indicator\n of running in a source tree.\n - gh-151558: Fixed an vulnerability in the tarfile data and\n tar extraction filters where crafted archives could create\n a symlink pointing outside the destination directory. This\n was a bypass of CVE-2025-4330 (bsc#1268977,\n CVE-2026-11940).\n - gh-150599: Fix a possible stack buffer overflow in bz2 when\n a bz2.BZ2Decompressor is reused after a decompression\n error. The decompressor now becomes unusable after libbz2\n reports an error (bsc#1267974, CVE-2026-9669).\n - gh-150743: http.client now limits the number of\n chunked-response trailer lines it will read to 100, and the\n number of interim (1xx) responses it will skip to 100.\n A malicious or broken server could previously stream\n trailer lines or 100 Continue responses forever, hanging\n the client even when a socket timeout was in use. Reported\n by @YLChen-007 via GHSA-w4q2-g22w-6fr4.\n - gh-149698: Update bundled libexpat to version 2.8.1 for the\n fix for CVE-2026-45186.\n - gh-87451: The ftplib module's undocumented ftpcp function\n no longer trusts the IPv4 address value returned from the\n source server in response to the PASV command by default,\n completing the fix for CVE-2021-4189. As with ftplib.FTP,\n the former behavior can be re-enabled by setting the\n trust_server_pasv_ipv4_address attribute on the source\n ftplib.FTP instance to True. Thanks to Qi Deng at Aurascape\n AI for the report (bsc#1265268, CVE-2026-8328).\n - gh-149486: tarfile.data_filter() now validates link targets\n using the same normalised value that is written to disk,\n strips trailing separators from the member name when\n resolving a symlink's directory, and rejects link members\n that would replace the destination directory itself. This\n closes several path-traversal bypasses of the data\n extraction filter (bsc#1267821, CVE-2026-7774).\n - gh-149079: Fix a potential denial of service in\n unicodedata.normalize(). The canonical ordering step of\n Unicode normalization used a quadratic-time insertion sort\n for reordering combining characters, which could be\n exploited with crafted input containing many combining\n characters in non-canonical order. Replaced with\n a linear-time counting sort for long runs (bsc#1267581,\n CVE-2026-3276).\n - gh-149018: Improved protection against XML hash-flooding\n attacks in xml.parsers.expat and xml.etree.ElementTree when\n Python is compiled with libExpat 2.8.0 or later\n (bsc#1264962, CVE-2026-7210).\n - gh-149017: Update bundled libexpat to version 2.8.0.\n - gh-148808: Added buffer boundary check when using nbytes\n parameter with\n asyncio.AbstractEventLoop.sock_recvfrom_into(). Only\n relevant for Windows and the asyncio.ProactorEventLoop.\n - gh-148395: Fix a dangling input pointer in\n lzma.LZMADecompressor, and bz2.BZ2Decompressor when memory\n allocation fails with MemoryError, which could let\n a subsequent decompress() call read or write through\n a stale pointer to the already-released caller buffer\n (bsc#1262098, CVE-2026-6100).\n - gh-148169: A bypass in webbrowser allowed URLs prefixed\n with %action to pass the dash-prefix safety check\n (bsc#1262319, CVE-2026-4786).\n - gh-146581: Fix vulnerability in shutil.unpack_archive() for\n ZIP files on Windows which allowed to write files outside\n of the destination tree if the patch in the archive\n contains a Windows drive prefix. Now such invalid paths\n will be skipped. Files containing \"..\" in the name (like\n \"foo..bar\") are no longer skipped.\n - gh-146333: Fix quadratic backtracking in\n configparser.RawConfigParser option parsing regexes (OPTCRE\n and OPTCRE_NV). A crafted configuration line with many\n whitespace characters could cause excessive CPU usage.\n - gh-146211: Reject CR/LF characters in tunnel request\n headers for the HTTPConnection.set_tunnel() method\n (bsc#1261969, CVE-2026-1502).\n - gh-145986: xml.parsers.expat: Fixed a crash caused by\n unbounded C recursion when converting deeply nested XML\n content models with ElementDeclHandler(). This addresses\n CVE-2026-4224 (bsc#1259735, CVE-2026-4224).\n - gh-145599: Reject control characters in http.cookies.Morsel\n update() and js_output(). This addresses CVE-2026-3644\n (bsc#1259734, CVE-2026-3644).\n - gh-145506: Fixes CVE-2026-2297 by ensuring that\n SourcelessFileLoader uses io.open_code() when opening .pyc\n files (bsc#1259240, CVE-2026-2297).\n - gh-144370: Disallow usage of control characters in status\n in wsgiref.handlers to prevent HTTP header injections.\n Patch by Benedikt Johannes.\n - gh-143930: Reject leading dashes in URLs passed to\n webbrowser.open() (bsc#1260026, CVE-2026-4519).\n - gh-143927: Normalize all line endings (CR, CRLF, and LF) to\n LF+TAB when writing multi-line configparser values\n (bsc#1269066, CVE-2026-0864).\n - Tests\n - gh-149776: Fix test_socket on Linux kernel 7.1 and newer:\n skip UDP Lite tests if it's not supported. Patch by Victor\n Stinner.\n","status":"published","published":"2026-09-16T09:45:01Z","modified":"2026-09-27T18:23:10.677871156Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:4534-1","title":"Security update for python312","description":"This update for python312 fixes the following issues:\n\n- CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611).\n- CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the\n  `configparser` module is used (bsc#1269066).\n- CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF (bsc#1261969).\n- CVE-2026-2297: cpython: incorrectly handled hook in FileLoader can lead to validation bypass (bsc#1259240).\n- CVE-2026-3276: quadratic complexity in `unicodedata.normalize()` can lead to DoS when processing specially crafted\n  Unicode input (bsc#1267581).\n- CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735).\n- CVE-2026-4360: in the Tarfile.extract() function, the filter parameter is not passed properly when extracting\n  hardlinks (bsc#1269959).\n- CVE-2026-4519: leading dashes in URLs are accepted by the `webbrowser.open()` API and allow for web browser command\n  line option injection (bsc#1260026).\n- CVE-2026-6100: Arbitrary code execution or information disclosure via use-after-free in decompression modules\n  (bsc#1262098).\n- CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding\n  protection (bsc#1264962).\n- CVE-2026-7774: `tarfile.data_filter` path traversal bypass allows writing outside the extraction directory\n  (bsc#1267821).\n- CVE-2026-8328: `ftpcp()` does not use actual peer address and trusts server-supplied PASV host address (bsc#1265268).\n- CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974).\n- CVE-2026-11940: tarfile extraction filter bypass via a crafted archive allows escaping the destination directory and\n  enables arbitrary file reads and writes (bsc#1268977).\n- CVE-2026-11972: infinite loop due to improper EOF handling in the tarfile module streaming mode can lead to DoS\n  (bsc#1269788).\n- CVE-2026-15308: Incremental HTMLParser allows CPU-exhaustion DoS via repeated unterminated markup declarations\n  (bsc#1271192).\n- CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111).\n- CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223).\n- CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226).\n- CVE-2026-19672: The tarfile module's tar and data extraction filters created directories outside the destination for\n  members whose name leaves the destination and retu (bsc#1276227).\n\nChanges for python312:\n\n- Update to 3.12.14:\n - Core and Builtins\n - gh-139808: Add branch protections for AArch64 (BTI/PAC) in\n assembly code used by -X perf_jit (Linux perf profiler\n integration).\n - Documentation\n - gh-136155: We are now checking for fatal errors in EPUB\n builds in CI.\n - Library\n - gh-109638: Fix exponential time in csv.Sniffer.sniff() for\n a sample which contains many quote characters. A doubled\n quote character is now also detected in a field which\n contains the delimiter or a line break.\n - gh-98820: Fix quadratic time in csv.Sniffer.sniff() for\n a sample which contains quoted fields, in particular for\n a single column of quoted fields.\n - gh-149231: In tomllib, the number of parts in TOML keys is\n now limited.\n - gh-146083: Update bundled libexpat to version 2.7.5.\n - gh-141707: Don't change tarfile.TarInfo type from AREGTYPE\n to DIRTYPE when parsing GNU long name or link headers\n (bsc#1259611, CVE-2025-13462).\n - gh-90949: Add\n SetBillionLaughsAttackProtectionActivationThreshold() and\n SetBillionLaughsAttackProtectionMaximumAmplification() to\n xmlparser objects to tune protections against billion\n laughs attacks. Patch by B�n�dikt Tran.\n - Security\n - gh-155558: Update bundled libexpat to version 2.8.3 for the\n fix to CVE 2026-72522.\n - gh-153030: Fixed quadratic complexity in incremental\n parsing of long unterminated constructs (such as tags or\n comments) in html.parser.HTMLParser, which could be\n exploited for a denial of service (bsc#1271192,\n CVE-2026-15308).\n - gh-152674: The xml.etree.ElementTree.Element methods\n findall(), iterfind() and find() avoid quadratic behavior\n when using XPath index predicates ([1], [last()],\n [last()-N]) on XML documents with many same-tag siblings.\n - gh-152216: Update bundled libexpat to version 2.8.2.\n - gh-151987: The tarfile.TarFile.extract() method now applies\n the given filter when it extracts a link target from the\n archive as a fallback (bsc#1269959, CVE-2026-4360).\n - gh-151981: In tarfile, seeking a stream now stops when end\n of the stream is reached (bsc#1269788, CVE-2026-11972).\n - gh-151544: Modules/Setup.local is no longer used as\n a landmark to discover whether Python is running in\n a source tree, as it could potentially affect actual\n installs. The pybuilddir.txt file is now the sole indicator\n of running in a source tree.\n - gh-151558: Fixed an vulnerability in the tarfile data and\n tar extraction filters where crafted archives could create\n a symlink pointing outside the destination directory. This\n was a bypass of CVE 2025-4330 (bsc#1268977,\n CVE-2026-11940).\n - gh-150599: Fix a possible stack buffer overflow in bz2 when\n a bz2.BZ2Decompressor is reused after a decompression\n error. The decompressor now becomes unusable after libbz2\n reports an error (bsc#1267974, CVE-2026-9669).\n - gh-150743: http.client now limits the number of\n chunked-response trailer lines it will read to 100, and the\n number of interim (1xx) responses it will skip to 100.\n A malicious or broken server could previously stream\n trailer lines or 100 Continue responses forever, hanging\n the client even when a socket timeout was in use. Reported\n by @YLChen-007 via GHSA-w4q2-g22w-6fr4.\n - gh-149698: Update bundled libexpat to version 2.8.1 for the\n fix for CVE 2026-45186.\n - gh-87451: The ftplib module's undocumented ftpcp function\n no longer trusts the IPv4 address value returned from the\n source server in response to the PASV command by default,\n completing the fix for CVE-2021-4189. As with ftplib.FTP,\n the former behavior can be re-enabled by setting the\n trust_server_pasv_ipv4_address attribute on the source\n ftplib.FTP instance to True. Thanks to Qi Deng at Aurascape\n AI for the report (bsc#1265268, CVE-2026-8328).\n - gh-149486: tarfile.data_filter() now validates link targets\n using the same normalised value that is written to disk,\n strips trailing separators from the member name when\n resolving a symlink's directory, and rejects link members\n that would replace the destination directory itself. This\n closes several path-traversal bypasses of the data\n extraction filter (bsc#1267821, CVE-2026-7774).\n - gh-149079: Fix a potential denial of service in\n unicodedata.normalize(). The canonical ordering step of\n Unicode normalization used a quadratic-time insertion sort\n for reordering combining characters, which could be\n exploited with crafted input containing many combining\n characters in non-canonical order. Replaced with\n a linear-time counting sort for long runs (bsc#1267581,\n CVE-2026-3276).\n - gh-149018: Improved protection against XML hash-flooding\n attacks in xml.parsers.expat and xml.etree.ElementTree when\n Python is compiled with libExpat 2.8.0 or later\n (bsc#1264962, CVE-2026-7210).\n - gh-149017: Update bundled libexpat to version 2.8.0.\n - gh-148808: Added buffer boundary check when using nbytes\n parameter with\n asyncio.AbstractEventLoop.sock_recvfrom_into(). Only\n relevant for Windows and the asyncio.ProactorEventLoop.\n - gh-148395: Fix a dangling input pointer in\n lzma.LZMADecompressor, bz2.BZ2Decompressor, and internal\n zlib._ZlibDecompressor when memory allocation fails with\n MemoryError, which could let a subsequent decompress() call\n read or write through a stale pointer to the\n already-released caller buffer (bsc#1262098, CVE-2026-6100,\n seems like it has been incompletely applied\n gh#python/cpython#151605).\n - gh-148169: A bypass in webbrowser allowed URLs prefixed\n with %action to pass the dash-prefix safety check\n (bsc#1262098, CVE-2026-6100).\n - gh-146581: Fix vulnerability in shutil.unpack_archive() for\n ZIP files on Windows which allowed to write files outside\n of the destination tree if the patch in the archive\n contains a Windows drive prefix. Now such invalid paths\n will be skipped. Files containing '..' in the name (like\n 'foo..bar') are no longer skipped.\n - gh-146333: Fix quadratic backtracking in\n configparser.RawConfigParser option parsing regexes (OPTCRE\n and OPTCRE_NV). A crafted configuration line with many\n whitespace characters could cause excessive CPU usage.\n - gh-146211: Reject CR/LF characters in tunnel request\n headers for the HTTPConnection.set_tunnel() method\n (bsc#1261969, CVE-2026-1502).\n - gh-145986: xml.parsers.expat: Fixed a crash caused by\n unbounded C recursion when converting deeply nested XML\n content models with ElementDeclHandler(). This addresses\n CVE 2026-4224 (bsc#1259735, CVE-2026-4224).\n - gh-145599: Reject control characters in http.cookies.Morsel\n update() and js_output(). This addresses CVE 2026-3644.\n - gh-145506: Fixes CVE 2026-2297 by ensuring that\n SourcelessFileLoader uses io.open_code() when opening .pyc\n files (bsc#1259240, CVE-2026-2297).\n - gh-144370: Disallow usage of control characters in status\n in wsgiref.handlers to prevent HTTP header injections.\n Patch by Benedikt Johannes.\n - gh-143930: Reject leading dashes in URLs passed to\n webbrowser.open() (bsc#1260026, CVE-2026-4519).\n - gh-143927: Normalize all line endings (CR, CRLF, and LF) to\n LF+TAB when writing multi-line configparser values\n (bsc#1269066, CVE-2026-0864).\n - Tests\n - gh-149776: Fix test_socket on Linux kernel 7.1 and newer:\n skip UDP Lite tests if it's not supported. Patch by Victor\n Stinner.\n","status":"published","published":"2026-10-06T07:58:38Z","modified":"2026-10-06T18:45:06.179529142Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"USN-5342-1","title":"python2.7, python3.4, python3.5, python3.6, python3.8 vulnerabilities","description":"David Schwörer discovered that Python incorrectly handled certain inputs.\nAn attacker could possibly use this issue to expose sensitive information.\nThis issue only affected Ubuntu 18.04 LTS. (CVE-2021-3426)\n\nIt was discovered that Python incorrectly handled certain FTP requests.\nAn attacker could possibly use this issue to expose sensitive information.\nThis issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 LTS.\n(CVE-2021-4189)\n\nIt was discovered that Python incorrectly handled certain inputs.\nAn attacker could possibly use this issue to execute arbitrary code.\n(CVE-2022-0391)\n","status":"published","published":"2022-03-28T09:39:26Z","modified":"2026-06-29T13:49:36.084444956Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5342-2","title":"python2.7 vulnerabilities","description":"USN-5342-1 fixed several vulnerabilities in Python. This update provides\nthe corresponding update for Ubuntu 14.04 ESM, Ubuntu 20.04 ESM and\nUbuntu 22.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that Python incorrectly handled certain FTP requests.\n An attacker could possibly use this issue to expose sensitive information.\n (CVE-2021-4189)\n\n It was discovered that Python incorrectly handled certain inputs.\n An attacker could possibly use this issue to execute arbitrary code.\n (CVE-2022-0391)\n","status":"published","published":"2022-08-24T08:56:59Z","modified":"2026-06-29T13:49:36.458971661Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-6891-1","title":"python3.5, python3.6, python3.7, python3.8, python3.9, python3.10, python3.11, python3.12 vulnerabilities","description":"It was discovered that Python incorrectly handled certain inputs.\nAn attacker could possibly use this issue to execute arbitrary code.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2015-20107)\n\nIt was discovered that Python incorrectly used regular expressions\nvulnerable to catastrophic backtracking. A remote attacker could possibly\nuse this issue to cause a denial of service. This issue only affected\nUbuntu 14.04 LTS. (CVE-2018-1060, CVE-2018-1061)\n\nIt was discovered that Python failed to initialize Expat’s hash salt. A\nremote attacker could possibly use this issue to cause hash collisions,\nleading to a denial of service. This issue only affected Ubuntu 14.04 LTS.\n(CVE-2018-14647)\n\nIt was discovered that Python incorrectly handled certain pickle files. An\nattacker could possibly use this issue to consume memory, leading to a\ndenial of service. This issue only affected Ubuntu 14.04 LTS.\n(CVE-2018-20406)\n\nIt was discovered that Python incorrectly validated the domain when\nhandling cookies. An attacker could possibly trick Python into sending\ncookies to the wrong domain. This issue only affected Ubuntu 14.04 LTS.\n(CVE-2018-20852)\n\nJonathan Birch and Panayiotis Panayiotou discovered that Python incorrectly\nhandled Unicode encoding during NFKC normalization. An attacker could\npossibly use this issue to obtain sensitive information. This issue only\naffected Ubuntu 14.04 LTS. (CVE-2019-9636, CVE-2019-10160)\n\nIt was discovered that Python incorrectly parsed certain email addresses. A\nremote attacker could possibly use this issue to trick Python applications\ninto accepting email addresses that should be denied. This issue only\naffected Ubuntu 14.04 LTS. (CVE-2019-16056)\n\nIt was discovered that the Python documentation XML-RPC server incorrectly\nhandled certain fields. A remote attacker could use this issue to execute a\ncross-site scripting (XSS) attack. This issue only affected Ubuntu 14.04\nLTS. (CVE-2019-16935)\n\nIt was discovered that Python documentation had a misleading information.\nA security issue could be possibly caused by wrong assumptions of this\ninformation. This issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04\nLTS. (CVE-2019-17514)\n\nIt was discovered that Python incorrectly stripped certain characters from\nrequests. A remote attacker could use this issue to perform CRLF injection.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2019-18348)\n\nIt was discovered that Python incorrectly handled certain TAR archives.\nAn attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2019-20907)\n\nColin Read and Nicolas Edet discovered that Python incorrectly handled\nparsing certain X509 certificates. An attacker could possibly use this\nissue to cause Python to crash, resulting in a denial of service. This\nissue only affected Ubuntu 14.04 LTS. (CVE-2019-5010)\n\nIt was discovered that incorrectly handled certain ZIP files. An attacker\ncould possibly use this issue to cause a denial of service. This issue only\naffected Ubuntu 14.04 LTS. (CVE-2019-9674)\n\nIt was discovered that Python incorrectly handled certain urls. A remote\nattacker could possibly use this issue to perform CRLF injection attacks.\nThis issue only affected Ubuntu 14.04 LTS. (CVE-2019-9740, CVE-2019-9947)\n\nSihoon Lee discovered that Python incorrectly handled the local_file:\nscheme. A remote attacker could possibly use this issue to bypass blocklist\nmeschanisms. This issue only affected Ubuntu 14.04 LTS. (CVE-2019-9948)\n\nIt was discovered that Python incorrectly handled certain IP values.\nAn attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2020-14422)\n\nIt was discovered that Python incorrectly handled certain character\nsequences. A remote attacker could possibly use this issue to perform\nCRLF injection. This issue only affected Ubuntu 14.04 LTS and Ubuntu\n18.04 LTS. (CVE-2020-26116)\n\nIt was discovered that Python incorrectly handled certain inputs.\nAn attacker could possibly use this issue to execute arbitrary code\nor cause a denial of service. This issue only affected Ubuntu 14.04 LTS.\n(CVE-2020-27619, CVE-2021-3177)\n\nIt was discovered that Python incorrectly handled certain HTTP requests.\nAn attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 14.04 LTS. (CVE-2020-8492)\n\nIt was discovered that the Python stdlib ipaddress API incorrectly handled\noctal strings. A remote attacker could possibly use this issue to perform a\nwide variety of attacks, including bypassing certain access restrictions.\nThis issue only affected Ubuntu 18.04 LTS. (CVE-2021-29921)\n\nDavid Schwörer discovered that Python incorrectly handled certain inputs.\nAn attacker could possibly use this issue to expose sensitive information.\nThis issue only affected Ubuntu 18.04 LTS. (CVE-2021-3426)\n\nIt was discovered that Python incorrectly handled certain RFCs.\nAn attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 14.04 LTS. (CVE-2021-3733)\n\nIt was discovered that Python incorrectly handled certain server\nresponses. An attacker could possibly use this issue to cause a denial of\nservice. This issue only affected Ubuntu 14.04 LTS. (CVE-2021-3737)\n\nIt was discovered that Python incorrectly handled certain FTP requests.\nAn attacker could possibly use this issue to expose sensitive information.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2021-4189)\n\nIt was discovered that Python incorrectly handled certain inputs.\nAn attacker could possibly use this issue to execute arbitrary code.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2022-0391)\n\nDevin Jeanpierre discovered that Python incorrectly handled sockets when\nthe multiprocessing module was being used. A local attacker could possibly\nuse this issue to execute arbitrary code and escalate privileges.\nThis issue only affected Ubuntu 22.04 LTS. (CVE-2022-42919)\n\nIt was discovered that Python incorrectly handled certain inputs. If a\nuser or an automated system were tricked into running a specially\ncrafted input, a remote attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 14.04 LTS,\nUbuntu 18.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-45061, CVE-2023-24329)\n\nIt was discovered that Python incorrectly handled certain scripts.\nAn attacker could possibly use this issue to execute arbitrary code\nor cause a crash. This issue only affected Ubuntu 14.04 LTS and\nUbuntu 18.04 LTS. (CVE-2022-48560)\n\nIt was discovered that Python incorrectly handled certain plist files.\nIf a user or an automated system were tricked into processing a specially\ncrafted plist file, an attacker could possibly use this issue to consume\nresources, resulting in a denial of service. This issue only affected\nUbuntu 14.04 LTS and Ubuntu 18.04 LTS. (CVE-2022-48564)\n\nIt was discovered that Python did not properly handle XML entity\ndeclarations in plist files. An attacker could possibly use this\nvulnerability to perform an XML External Entity (XXE) injection,\nresulting in a denial of service or information disclosure. This issue\nonly affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS. (CVE-2022-48565)\n\nIt was discovered that Python did not properly provide constant-time\nprocessing for a crypto operation. An attacker could possibly use this\nissue to perform a timing attack and recover sensitive information. This\nissue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2022-48566)\n\nIt was discovered that Python instances of ssl.SSLSocket were vulnerable\nto a bypass of the TLS handshake. An attacker could possibly use this\nissue to cause applications to treat unauthenticated received data before\nTLS handshake as authenticated data after TLS handshake. This issue only\naffected Ubuntu 14.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu\n22.04 LTS. (CVE-2023-40217)\n\nIt was discovered that Python incorrectly handled null bytes when\nnormalizing pathnames. An attacker could possibly use this issue to bypass\ncertain filename checks. This issue only affected Ubuntu 22.04 LTS.\n(CVE-2023-41105)\n\nIt was discovered that Python incorrectly handled privilege with certain\nparameters. An attacker could possibly use this issue to maintain the\noriginal processes' groups before starting the new process. This issue\nonly affected Ubuntu 23.10. (CVE-2023-6507)\n\nIt was discovered that Python incorrectly handled symlinks in temp files.\nAn attacker could possibly use this issue to modify the permissions of\nfiles. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,\nUbuntu 22.04 LTS and Ubuntu 23.10. (CVE-2023-6597)\n\nIt was discovered that Python incorrectly handled certain crafted zip\nfiles. An attacker could possibly use this issue to crash the program,\nresulting in a denial of service. (CVE-2024-0450)\n","status":"published","published":"2024-07-11T11:54:39Z","modified":"2026-10-08T19:46:34.299556794Z","updated_at":"2026-11-02T16:58:17.914523Z"},{"id":"USN-8509-1","title":"python3.10, python3.12, python3.14 vulnerabilities","description":"It was discovered that Python incorrectly normalized paths in the tarfile\nmodule. An attacker could possibly use this issue to bypass path\nrestrictions. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04\nLTS. (CVE-2025-13462)\n\nIt was discovered that Python's HTMLParser incorrectly handled certain\nmalformed HTML input. An attacker could possibly use this issue to cause\nPython to crash, resulting in a denial of service. This issue only affected\nUbuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2025-69534)\n\nIt was discovered that Python's email module incorrectly quoted newlines\nin headers. An attacker could possibly use this issue to inject arbitrary\nemail headers. This issue only affected Ubuntu 22.04 LTS and Ubuntu\n24.04 LTS. (CVE-2026-1299)\n\nIt was discovered that Python's http.client module did not properly\nsanitize carriage return and linefeed characters when handling HTTP\nCONNECT tunnel request headers. An attacker could possibly use this issue\nto inject arbitrary HTTP headers. (CVE-2026-1502)\n\nIt was discovered that Python's importlib module did not generate an\naudit event when loading legacy .pyc files. An attacker could possibly\nuse this issue to bypass auditing mechanisms. This issue only affected\nUbuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-2297)\n\nIt was discovered that Python's unicodedata.normalize() function had\nincorrect algorithmic complexity. An attacker could possibly use this\nissue to cause Python to consume excessive resources, leading to a denial\nof service. (CVE-2026-3276)\n\nIt was discovered that Python's http.cookies module incorrectly handled\ncontrol characters in certain cookie operations. An attacker could possibly\nuse this issue to inject arbitrary content. This issue only affected Ubuntu\n22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-3644)\n\nIt was discovered that the Python pyexpat module was vulnerable to\nunbounded recursion in the Expat XML parser. An attacker could possibly use\nthis issue to cause Python to crash, resulting in a denial of service. This\nissue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-4224)\n\nIt was discovered that Python's webbrowser module accepted leading dashes\nin URLs, which could be interpreted as command-line options. An attacker\ncould possibly use this issue to execute arbitrary commands. This issue\nonly affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-4519)\n\nIt was discovered that Python incorrectly handled webbrowser.open()\nhandlers. An attacker could possibly use this issue to execute arbitrary\ncommands. (CVE-2026-4786)\n\nIt was discovered that Python's remote debugging module did not properly\nvalidate offset tables when loading debug information. An attacker could\npossibly use this issue to cause Python to crash or execute arbitrary\ncode. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-5713)\n\nIt was discovered that Python's http.cookies module incorrectly escaped\nvalues in the js_output() method. An attacker could possibly use this issue\nto inject arbitrary JavaScript. (CVE-2026-6019)\n\nIt was discovered that Python's lzma, bz2, and gzip decompressor objects\nhad a use-after-free vulnerability. An attacker could possibly use this\nissue to cause Python to crash or execute arbitrary code. (CVE-2026-6100)\n\nIt was discovered that Python's tarfile module did not properly validate\nlink targets when using the data filter. An attacker could possibly use\nthis issue to bypass path restrictions. This issue only affected Ubuntu\n24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-7774)\n\nIt was discovered that the fix for CVE-2021-4189 in Python's ftplib module\nwas incomplete, allowing PASV responses to be used in ftplib.ftpcp(). An\nattacker could possibly use this issue to perform server-side request\nforgery attacks. (CVE-2026-8328)\n\nIt was discovered that Python's bz2 module allowed reuse of a\nBZ2Decompressor object after a decompression error. An attacker could\npossibly use this issue to cause Python to crash or execute arbitrary\ncode. (CVE-2026-9669)","status":"published","published":"2026-07-06T11:48:55Z","modified":"2026-07-06T20:34:33.278982385Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}