{"id":"CVE-2025-13462","aliases":["AZL-109686","AZL-80493","BELL-CVE-2025-13462","BIT-libpython-2025-13462","BIT-python-2025-13462","BIT-python-min-2025-13462","CLSA-2026-1781082390","CLSA-2026-1781082676","CLSA-2026-1781083045","CLSA-2026-1781083526","CLSA-2026-1781083779","CLSA-2026-1781086040","CLSA-2026-1781104507","CLSA-2026-1781107808","CLSA-2026-1781173352","CLSA-2026-1781174666","CLSA-2026-1781176375","CLSA-2026-1781205404","CLSA-2026-1781259901","CLSA-2026-1781342809","CLSA-2026-1781525675","CLSA-2026-1781527577","CLSA-2026-1781528783","CLSA-2026-1783703079","CLSA-2026-1783705997","DEBIAN-CVE-2025-13462","EUVD-2025-208613","GHSA-9qpv-486p-2v4h","OESA-2026-1899","OESA-2026-1900","OESA-2026-1901","OESA-2026-1902","PSF-2026-10","RHSA-2026:10118","RHSA-2026:11324","RHSA-2026:7443","RHSA-2026:7661","ROOT-OS-DEBIAN-12-CVE-2025-13462","SUSE-SU-2026:1206-1","SUSE-SU-2026:1292-1","SUSE-SU-2026:1296-1","SUSE-SU-2026:1345-1","SUSE-SU-2026:1349-1","SUSE-SU-2026:1354-1","SUSE-SU-2026:1376-1","SUSE-SU-2026:1385-1","SUSE-SU-2026:1417-1","SUSE-SU-2026:1530-1","SUSE-SU-2026:1715-1","SUSE-SU-2026:21104-1","SUSE-SU-2026:21178-1","SUSE-SU-2026:21254-1","SUSE-SU-2026:23743-1","SUSE-SU-2026:4534-1","UBUNTU-CVE-2025-13462","USN-8509-1","openSUSE-SU-2026:10469-1","openSUSE-SU-2026:10477-1","openSUSE-SU-2026:10478-1","openSUSE-SU-2026:10479-1","openSUSE-SU-2026:10480-1","openSUSE-SU-2026:10481-1","openSUSE-SU-2026:20517-1"],"status":"published","title":"tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling","description":"The \"tarfile\" module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.","severity":{"version":"4.0","score":2,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00183,"percentile":0.07934,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20","CWE-434","CWE-74"],"published":"2026-03-12T17:59:26Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"python3","fixed_in":["3.12.9-13"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"python3","fixed_in":["3.11.16-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"python3","fixed_in":["3.12.14-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"python3","fixed_in":["3.14.3-r1"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"python3","fixed_in":["3.11.16-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"python3","fixed_in":["3.12.14-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"python3","fixed_in":["3.14.3-r1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"idle-python2.7","fixed_in":["2.7.18-1~20.04.7+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libpython2.7","fixed_in":["2.7.18-1~20.04.7+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libpython2.7-dev","fixed_in":["2.7.18-1~20.04.7+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libpython2.7-minimal","fixed_in":["2.7.18-1~20.04.7+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libpython2.7-stdlib","fixed_in":["2.7.18-1~20.04.7+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libpython2.7-testsuite","fixed_in":["2.7.18-1~20.04.7+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"python2.7","fixed_in":["2.7.18-1~20.04.7+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"python2.7-dev","fixed_in":["2.7.18-1~20.04.7+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"python2.7-doc","fixed_in":["2.7.18-1~20.04.7+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"python2.7-examples","fixed_in":["2.7.18-1~20.04.7+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"python2.7-minimal","fixed_in":["2.7.18-1~20.04.7+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"platform-python","fixed_in":["3.6.8-62.el8.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"platform-python-debug","fixed_in":["3.6.8-62.el8.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"platform-python-devel","fixed_in":["3.6.8-62.el8.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-devel","fixed_in":["3.6.8-62.el8.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-idle","fixed_in":["3.6.8-62.el8.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-libs","fixed_in":["3.6.8-62.el8.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-test","fixed_in":["3.6.8-62.el8.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-tkinter","fixed_in":["3.6.8-62.el8.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11","fixed_in":["3.11.11-2.el9_6.2.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-debug","fixed_in":["3.11.11-2.el9_6.2.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-devel","fixed_in":["3.11.11-2.el9_6.2.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-idle","fixed_in":["3.11.11-2.el9_6.2.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-libs","fixed_in":["3.11.11-2.el9_6.2.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-test","fixed_in":["3.11.11-2.el9_6.2.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-tkinter","fixed_in":["3.11.11-2.el9_6.2.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"platform-python","fixed_in":["3.6.8-42.el8.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"platform-python-debug","fixed_in":["3.6.8-42.el8.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"platform-python-devel","fixed_in":["3.6.8-42.el8.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"python3-devel","fixed_in":["3.6.8-42.el8.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"python3-idle","fixed_in":["3.6.8-42.el8.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"python3-libs","fixed_in":["3.6.8-42.el8.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"python3-test","fixed_in":["3.6.8-42.el8.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"python3-tkinter","fixed_in":["3.6.8-42.el8.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"platform-python","fixed_in":["3.6.8-40.el8_4.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"platform-python-debug","fixed_in":["3.6.8-40.el8_4.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"platform-python-devel","fixed_in":["3.6.8-40.el8_4.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"python3-devel","fixed_in":["3.6.8-40.el8_4.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"python3-idle","fixed_in":["3.6.8-40.el8_4.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"python3-libs","fixed_in":["3.6.8-40.el8_4.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"python3-test","fixed_in":["3.6.8-40.el8_4.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"python3-tkinter","fixed_in":["3.6.8-40.el8_4.tuxcare.els21"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11","fixed_in":["3.11.2-2.el9_2.2.tuxcare.els28"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-debug","fixed_in":["3.11.2-2.el9_2.2.tuxcare.els28"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-devel","fixed_in":["3.11.2-2.el9_2.2.tuxcare.els28"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-idle","fixed_in":["3.11.2-2.el9_2.2.tuxcare.els28"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-libs","fixed_in":["3.11.2-2.el9_2.2.tuxcare.els28"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-test","fixed_in":["3.11.2-2.el9_2.2.tuxcare.els28"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-tkinter","fixed_in":["3.11.2-2.el9_2.2.tuxcare.els28"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python-unversioned-command","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els28"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els28"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-debug","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els28"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-devel","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els28"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-idle","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els28"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libs","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els28"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-test","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els28"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-tkinter","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els28"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python-unversioned-command","fixed_in":["3.9.21-2.el9_6.2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3","fixed_in":["3.9.21-2.el9_6.2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-debug","fixed_in":["3.9.21-2.el9_6.2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-devel","fixed_in":["3.9.21-2.el9_6.2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-idle","fixed_in":["3.9.21-2.el9_6.2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-libs","fixed_in":["3.9.21-2.el9_6.2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-test","fixed_in":["3.9.21-2.el9_6.2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-tkinter","fixed_in":["3.9.21-2.el9_6.2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"python3.11","fixed_in":["3.11.2-6+deb12u8"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"python3.13","fixed_in":["3.13.5-2+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"python3.14","fixed_in":["3.14.3-4"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"python3.10","fixed_in":["3.10.12-1~22.04.16"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"python3.12","fixed_in":["3.12.3-1ubuntu0.15"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.11.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.9-13"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.3-r0"},{"fixed":"3.11.16-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.10-r1"},{"fixed":"3.12.14-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.4-r0"},{"fixed":"3.14.3-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.3-r0"},{"fixed":"3.11.16-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.10-r1"},{"fixed":"3.12.14-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.4-r0"},{"fixed":"3.14.3-r1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"idle-python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libpython2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libpython2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libpython2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libpython2.7-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libpython2.7-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"python2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"python2.7-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"python2.7-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"python2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"platform-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"platform-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"platform-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"platform-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"platform-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"platform-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"platform-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-40.el8_4.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"platform-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-40.el8_4.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"platform-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-40.el8_4.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-40.el8_4.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-40.el8_4.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-40.el8_4.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-40.el8_4.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-40.el8_4.tuxcare.els21"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els28"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els28"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els28"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els28"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els28"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els28"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els28"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python-unversioned-command","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els28"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els28"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els28"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els28"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els28"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els28"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els28"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els28"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python-unversioned-command","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"idle-python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-venv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"idle-python3.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython3.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython3.6-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython3.6-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython3.6-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython3.6-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3.6-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3.6-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3.6-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3.6-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3.6-venv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els23"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"idle-python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython2.7-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython2.7-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python2.7-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python2.7-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els14"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"idle-python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython2.7-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython2.7-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python2.7-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python2.7-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"idle-python3.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython3.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython3.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython3.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython3.7-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython3.7-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3.7-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3.7-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3.7-venv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els5"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"idle-python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.5.el7_9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-94.0.1.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-6+deb12u8"}]}],"versions":["3.11.2-6","3.11.2-6+deb12u1","3.11.2-6+deb12u2","3.11.2-6+deb12u3","3.11.2-6+deb12u4","3.11.2-6+deb12u5","3.11.2-6+deb12u6","3.11.2-6+deb12u7"]},{"source":"osv","ecosystem":"Debian:13","package":"python3.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.5-2+deb13u1"}]}],"versions":["3.13.5-2"]},{"source":"osv","ecosystem":"Debian:14","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.3-4"}]}],"versions":["3.14.0-1","3.14.0-2","3.14.0-3","3.14.0-4","3.14.0-5","3.14.0~a7-1","3.14.0~b1-1","3.14.0~b2-1","3.14.0~b3-1","3.14.0~b4-1","3.14.0~rc1-1","3.14.0~rc2-1","3.14.0~rc3-1","3.14.2-1","3.14.3-1","3.14.3-2","3.14.3-3"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.6-24.oe2403"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.6-27.oe2403sp1"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.6-27.oe2403sp2"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.6-27.oe2403sp3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-3.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-3.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-3.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-3.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-3.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-3.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.13-3.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.15-4.2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.15-4.2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.15-4.2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.15-4.2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.15-4.2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.15-4.2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.15-4.2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.13-1.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.13-1.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.13-1.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-freethreading","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.13-1.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-freethreading-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.13-1.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.13-1.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.13-1.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.13-1.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.13-1.hum1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python-unversioned-command","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-1.hum1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-1.hum1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-1.hum1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-1.hum1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-1.hum1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-1.hum1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-1.hum1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-1.hum1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-1.hum1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-1.hum1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-1.hum1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-1.hum1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-1.hum1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-1.hum1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-1.hum1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.4-1.hum1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.111.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.111.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.111.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.111.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.111.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-150600.3.53.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python312-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-150600.3.53.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-150600.3.53.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python312-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-150600.3.53.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-150600.3.53.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python312-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-150600.3.53.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python312-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-150600.3.53.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python39","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.25-150300.4.99.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python39-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.25-150300.4.99.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python39","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.25-150300.4.99.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python39-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.25-150300.4.99.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python39","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.25-150300.4.99.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python39-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.25-150300.4.99.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python39-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.25-150300.4.99.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python36","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-108.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python36-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-108.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python36","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-108.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python36-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-108.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.53.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.53.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.53.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.53.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.53.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.53.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.53.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.53.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.53.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150600.3.53.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.13-150700.4.45.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python313-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.13-150700.4.45.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.20-150400.4.107.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python310-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.20-150400.4.107.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.20-150400.4.107.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python310-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.20-150400.4.107.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.20-150400.4.107.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python310-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.20-150400.4.107.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.20-150400.4.107.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python310-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.20-150400.4.107.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.20-150400.4.107.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python310-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.20-150400.4.107.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python310-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.20-150400.4.107.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-25.180.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-25.180.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-25.180.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-25.180.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.74.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.74.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.74.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.74.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.74.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.74.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-150400.9.85.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.13-160000.1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"python313-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.13-160000.1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.13-160000.1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"python313-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.13-160000.1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"python313-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.13-160000.1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.13-160000.1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"python313-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.13-160000.1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"python313-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.13-160000.1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-slfo.1.1_3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-slfo.1.1_3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-slfo.1.1_1.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-slfo.1.1_1.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-150600.3.68.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python312-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-150600.3.68.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-150600.3.68.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python312-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-150600.3.68.1"}]}],"bundled":26},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.5-8ubuntu3","2.7.5-8ubuntu4","2.7.6-2","2.7.6-2ubuntu1","2.7.6-3","2.7.6-3ubuntu1","2.7.6-4","2.7.6-4ubuntu1","2.7.6-5","2.7.6-7","2.7.6-8","2.7.6-8ubuntu0.2","2.7.6-8ubuntu0.3","2.7.6-8ubuntu0.4","2.7.6-8ubuntu0.5","2.7.6-8ubuntu0.6+esm2","2.7.6-8ubuntu0.6+esm3","2.7.6-8ubuntu0.6+esm5","2.7.6-8ubuntu0.6+esm6","2.7.6-8ubuntu0.6+esm7","2.7.6-8ubuntu0.6+esm8","2.7.6-8ubuntu0.6+esm9","2.7.6-8ubuntu0.6+esm10","2.7.6-8ubuntu0.6+esm11","2.7.6-8ubuntu0.6+esm12","2.7.6-8ubuntu0.6+esm13","2.7.6-8ubuntu0.6+esm14","2.7.6-8ubuntu0.6+esm15","2.7.6-8ubuntu0.6+esm16","2.7.6-8ubuntu0.6+esm17","2.7.6-8ubuntu0.6+esm18","2.7.6-8ubuntu0.6+esm20","2.7.6-8ubuntu0.6+esm21","2.7.6-8ubuntu0.6+esm22","2.7.6-8ubuntu0.6+esm24","2.7.6-8ubuntu0.6+esm25","2.7.6-8ubuntu0.6+esm26","2.7.6-8ubuntu0.6+esm28","2.7.6-8ubuntu0.6+esm29","2.7.6-8ubuntu0.6+esm30"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python3.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.4~b1-0ubuntu3","3.4~b1-4ubuntu4","3.4~b1-4ubuntu6","3.4~b1-5ubuntu2","3.4~b2-1","3.4~b3-1ubuntu1","3.4~rc1-1build1","3.4~rc2-1","3.4~rc3-0ubuntu1","3.4.0-1","3.4.0-2ubuntu1","3.4.0-2ubuntu1.1","3.4.3-1ubuntu1~14.04.1","3.4.3-1ubuntu1~14.04.3","3.4.3-1ubuntu1~14.04.4","3.4.3-1ubuntu1~14.04.5","3.4.3-1ubuntu1~14.04.6","3.4.3-1ubuntu1~14.04.7","3.4.3-1ubuntu1~14.04.7+esm2","3.4.3-1ubuntu1~14.04.7+esm4","3.4.3-1ubuntu1~14.04.7+esm6","3.4.3-1ubuntu1~14.04.7+esm7","3.4.3-1ubuntu1~14.04.7+esm8","3.4.3-1ubuntu1~14.04.7+esm10","3.4.3-1ubuntu1~14.04.7+esm11","3.4.3-1ubuntu1~14.04.7+esm12","3.4.3-1ubuntu1~14.04.7+esm13","3.4.3-1ubuntu1~14.04.7+esm14","3.4.3-1ubuntu1~14.04.7+esm15","3.4.3-1ubuntu1~14.04.7+esm16","3.4.3-1ubuntu1~14.04.7+esm17","3.4.3-1ubuntu1~14.04.7+esm19","3.4.3-1ubuntu1~14.04.7+esm20","3.4.3-1ubuntu1~14.04.7+esm21"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.5.2-2ubuntu0~16.04.4~14.04.1","3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","3.5.2-2ubuntu0~16.04.4~14.04.1+esm3","3.5.2-2ubuntu0~16.04.4~14.04.1+esm4","3.5.2-2ubuntu0~16.04.4~14.04.1+esm5","3.5.2-2ubuntu0~16.04.4~14.04.1+esm6","3.5.2-2ubuntu0~16.04.4~14.04.1+esm7","3.5.2-2ubuntu0~16.04.4~14.04.1+esm8","3.5.2-2ubuntu0~16.04.4~14.04.1+esm9","3.5.2-2ubuntu0~16.04.4~14.04.1+esm10","3.5.2-2ubuntu0~16.04.4~14.04.1+esm11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.10-4ubuntu1","2.7.10-4ubuntu2","2.7.11-2","2.7.11-3","2.7.11-4","2.7.11-6","2.7.11-7","2.7.11-7ubuntu1","2.7.12-1~16.04","2.7.12-1ubuntu0~16.04.1","2.7.12-1ubuntu0~16.04.2","2.7.12-1ubuntu0~16.04.3","2.7.12-1ubuntu0~16.04.4","2.7.12-1ubuntu0~16.04.8","2.7.12-1ubuntu0~16.04.9","2.7.12-1ubuntu0~16.04.11","2.7.12-1ubuntu0~16.04.12","2.7.12-1ubuntu0~16.04.13","2.7.12-1ubuntu0~16.04.14","2.7.12-1ubuntu0~16.04.16","2.7.12-1ubuntu0~16.04.18","2.7.12-1ubuntu0~16.04.18+esm1","2.7.12-1ubuntu0~16.04.18+esm2","2.7.12-1ubuntu0~16.04.18+esm3","2.7.12-1ubuntu0~16.04.18+esm4","2.7.12-1ubuntu0~16.04.18+esm5","2.7.12-1ubuntu0~16.04.18+esm6","2.7.12-1ubuntu0~16.04.18+esm7","2.7.12-1ubuntu0~16.04.18+esm8","2.7.12-1ubuntu0~16.04.18+esm9","2.7.12-1ubuntu0~16.04.18+esm10","2.7.12-1ubuntu0~16.04.18+esm11","2.7.12-1ubuntu0~16.04.18+esm12","2.7.12-1ubuntu0~16.04.18+esm13","2.7.12-1ubuntu0~16.04.18+esm15","2.7.12-1ubuntu0~16.04.18+esm16","2.7.12-1ubuntu0~16.04.18+esm17","2.7.12-1ubuntu0~16.04.18+esm18","2.7.12-1ubuntu0~16.04.18+esm19","2.7.12-1ubuntu0~16.04.18+esm20","2.7.12-1ubuntu0~16.04.18+esm21","2.7.12-1ubuntu0~16.04.18+esm22"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.5.0-3","3.5.0-3ubuntu1","3.5.1~rc1-2ubuntu1","3.5.1-1","3.5.1-2","3.5.1-3","3.5.1-5","3.5.1-6ubuntu1","3.5.1-6ubuntu2","3.5.1-9ubuntu1","3.5.1-10","3.5.2-2~16.01","3.5.2-2~16.04","3.5.2-2ubuntu0~16.04.1","3.5.2-2ubuntu0~16.04.2","3.5.2-2ubuntu0~16.04.3","3.5.2-2ubuntu0~16.04.4","3.5.2-2ubuntu0~16.04.5","3.5.2-2ubuntu0~16.04.8","3.5.2-2ubuntu0~16.04.9","3.5.2-2ubuntu0~16.04.10","3.5.2-2ubuntu0~16.04.11","3.5.2-2ubuntu0~16.04.12","3.5.2-2ubuntu0~16.04.13","3.5.2-2ubuntu0~16.04.13+esm1","3.5.2-2ubuntu0~16.04.13+esm2","3.5.2-2ubuntu0~16.04.13+esm3","3.5.2-2ubuntu0~16.04.13+esm5","3.5.2-2ubuntu0~16.04.13+esm6","3.5.2-2ubuntu0~16.04.13+esm7","3.5.2-2ubuntu0~16.04.13+esm8","3.5.2-2ubuntu0~16.04.13+esm9","3.5.2-2ubuntu0~16.04.13+esm10","3.5.2-2ubuntu0~16.04.13+esm11","3.5.2-2ubuntu0~16.04.13+esm12","3.5.2-2ubuntu0~16.04.13+esm13","3.5.2-2ubuntu0~16.04.13+esm14","3.5.2-2ubuntu0~16.04.13+esm15","3.5.2-2ubuntu0~16.04.13+esm16","3.5.2-2ubuntu0~16.04.13+esm17","3.5.2-2ubuntu0~16.04.13+esm18","3.5.2-2ubuntu0~16.04.13+esm19","3.5.2-2ubuntu0~16.04.13+esm20","3.5.2-2ubuntu0~16.04.13+esm21","3.5.2-2ubuntu0~16.04.13+esm22","3.5.2-2ubuntu0~16.04.13+esm23","3.5.2-2ubuntu0~16.04.13+esm24","3.5.2-2ubuntu0~16.04.13+esm25"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.14-2ubuntu2","2.7.14-4","2.7.14-6","2.7.14-7","2.7.14-8","2.7.15~rc1-1","2.7.15~rc1-1ubuntu0.1","2.7.15-4ubuntu4~18.04","2.7.15-4ubuntu4~18.04.1","2.7.15-4ubuntu4~18.04.2","2.7.17-1~18.04","2.7.17-1~18.04ubuntu1","2.7.17-1~18.04ubuntu1.1","2.7.17-1~18.04ubuntu1.2","2.7.17-1~18.04ubuntu1.3","2.7.17-1~18.04ubuntu1.5","2.7.17-1~18.04ubuntu1.6","2.7.17-1~18.04ubuntu1.7","2.7.17-1~18.04ubuntu1.8","2.7.17-1~18.04ubuntu1.10","2.7.17-1~18.04ubuntu1.11","2.7.17-1~18.04ubuntu1.13","2.7.17-1~18.04ubuntu1.13+esm1","2.7.17-1~18.04ubuntu1.13+esm2","2.7.17-1~18.04ubuntu1.13+esm3","2.7.17-1~18.04ubuntu1.13+esm4","2.7.17-1~18.04ubuntu1.13+esm5","2.7.17-1~18.04ubuntu1.13+esm6","2.7.17-1~18.04ubuntu1.13+esm7","2.7.17-1~18.04ubuntu1.13+esm8","2.7.17-1~18.04ubuntu1.13+esm10","2.7.17-1~18.04ubuntu1.13+esm11","2.7.17-1~18.04ubuntu1.13+esm12","2.7.17-1~18.04ubuntu1.13+esm13","2.7.17-1~18.04ubuntu1.13+esm14","2.7.17-1~18.04ubuntu1.13+esm15"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.3-1ubuntu1","3.6.4~rc1-1","3.6.4~rc1-2","3.6.4-1","3.6.4-2","3.6.4-3build1","3.6.4-4","3.6.5~rc1-1","3.6.5-3","3.6.6-1~18.04","3.6.7-1~18.04","3.6.8-1~18.04.1","3.6.8-1~18.04.2","3.6.8-1~18.04.3","3.6.9-1~18.04","3.6.9-1~18.04ubuntu1","3.6.9-1~18.04ubuntu1.1","3.6.9-1~18.04ubuntu1.3","3.6.9-1~18.04ubuntu1.4","3.6.9-1~18.04ubuntu1.6","3.6.9-1~18.04ubuntu1.7","3.6.9-1~18.04ubuntu1.8","3.6.9-1~18.04ubuntu1.9","3.6.9-1~18.04ubuntu1.10","3.6.9-1~18.04ubuntu1.12","3.6.9-1~18.04ubuntu1.13","3.6.9-1~18.04ubuntu1.13+esm1","3.6.9-1~18.04ubuntu1.13+esm2","3.6.9-1~18.04ubuntu1.13+esm3","3.6.9-1~18.04ubuntu1.13+esm4","3.6.9-1~18.04ubuntu1.13+esm5","3.6.9-1~18.04ubuntu1.13+esm6","3.6.9-1~18.04ubuntu1.13+esm7","3.6.9-1~18.04ubuntu1.13+esm8","3.6.9-1~18.04ubuntu1.13+esm9","3.6.9-1~18.04ubuntu1.13+esm10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.7.0~a2-1","3.7.0~a3-1","3.7.0~a3-2","3.7.0~a3-3","3.7.0~a4-1","3.7.0~b1-1","3.7.0~b1-1build1","3.7.0~b2-1","3.7.0~b3-1","3.7.0-1~18.04","3.7.1-1~18.04","3.7.3-2~18.04.1","3.7.5-2~18.04","3.7.5-2~18.04.4","3.7.5-2ubuntu1~18.04.2","3.7.5-2ubuntu1~18.04.2+esm1","3.7.5-2ubuntu1~18.04.2+esm2","3.7.5-2ubuntu1~18.04.2+esm3","3.7.5-2ubuntu1~18.04.2+esm4","3.7.5-2ubuntu1~18.04.2+esm5","3.7.5-2ubuntu1~18.04.2+esm6","3.7.5-2ubuntu1~18.04.2+esm7","3.7.5-2ubuntu1~18.04.2+esm8","3.7.5-2ubuntu1~18.04.2+esm9","3.7.5-2ubuntu1~18.04.2+esm10","3.7.5-2ubuntu1~18.04.2+esm11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.8.0-3~18.04","3.8.0-3~18.04.1","3.8.0-3ubuntu1~18.04.2","3.8.0-3ubuntu1~18.04.2+esm1","3.8.0-3ubuntu1~18.04.2+esm2","3.8.0-3ubuntu1~18.04.2+esm3","3.8.0-3ubuntu1~18.04.2+esm4","3.8.0-3ubuntu1~18.04.2+esm5","3.8.0-3ubuntu1~18.04.2+esm6","3.8.0-3ubuntu1~18.04.2+esm7","3.8.0-3ubuntu1~18.04.2+esm8","3.8.0-3ubuntu1~18.04.2+esm9","3.8.0-3ubuntu1~18.04.2+esm10","3.8.0-3ubuntu1~18.04.2+esm11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python3.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.8.0-1","3.8.0-2","3.8.0-3","3.8.0-4","3.8.0-5","3.8.1-2ubuntu3","3.8.2~rc1-1ubuntu1","3.8.2-1","3.8.2-1ubuntu1","3.8.2-1ubuntu1.1","3.8.2-1ubuntu1.2","3.8.5-1~20.04","3.8.5-1~20.04.2","3.8.5-1~20.04.3","3.8.10-0ubuntu1~20.04","3.8.10-0ubuntu1~20.04.1","3.8.10-0ubuntu1~20.04.2","3.8.10-0ubuntu1~20.04.4","3.8.10-0ubuntu1~20.04.5","3.8.10-0ubuntu1~20.04.6","3.8.10-0ubuntu1~20.04.7","3.8.10-0ubuntu1~20.04.8","3.8.10-0ubuntu1~20.04.9","3.8.10-0ubuntu1~20.04.10","3.8.10-0ubuntu1~20.04.11","3.8.10-0ubuntu1~20.04.12","3.8.10-0ubuntu1~20.04.13","3.8.10-0ubuntu1~20.04.14","3.8.10-0ubuntu1~20.04.15","3.8.10-0ubuntu1~20.04.16","3.8.10-0ubuntu1~20.04.17","3.8.10-0ubuntu1~20.04.18","3.8.10-0ubuntu1~20.04.18+esm1","3.8.10-0ubuntu1~20.04.18+esm2","3.8.10-0ubuntu1~20.04.18+esm3","3.8.10-0ubuntu1~20.04.18+esm4","3.8.10-0ubuntu1~20.04.18+esm5","3.8.10-0ubuntu1~20.04.18+esm6","3.8.10-0ubuntu1~20.04.18+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.17~rc1-1","2.7.17-1","2.7.17-1ubuntu5","2.7.17-1ubuntu6","2.7.18~rc1-2","2.7.18-1~20.04","2.7.18-1~20.04.1","2.7.18-1~20.04.1+esm1","2.7.18-1~20.04.3","2.7.18-1~20.04.3+esm1","2.7.18-1~20.04.4","2.7.18-1~20.04.4+esm1","2.7.18-1~20.04.4+esm2","2.7.18-1~20.04.4+esm3","2.7.18-1~20.04.5","2.7.18-1~20.04.5+esm1","2.7.18-1~20.04.5+esm2","2.7.18-1~20.04.6","2.7.18-1~20.04.6+esm1","2.7.18-1~20.04.7","2.7.18-1~20.04.7+esm3","2.7.18-1~20.04.7+esm4","2.7.18-1~20.04.7+esm6","2.7.18-1~20.04.7+esm7","2.7.18-1~20.04.7+esm8","2.7.18-1~20.04.7+esm9","2.7.18-1~20.04.7+esm10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python3.9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.9.0~rc1-1~20.04","3.9.0-5~20.04","3.9.5-3~20.04.1","3.9.5-3ubuntu0~20.04.1","3.9.5-3ubuntu0~20.04.1+esm1","3.9.5-3ubuntu0~20.04.1+esm2","3.9.5-3ubuntu0~20.04.1+esm3","3.9.5-3ubuntu0~20.04.1+esm4","3.9.5-3ubuntu0~20.04.1+esm5","3.9.5-3ubuntu0~20.04.1+esm6","3.9.5-3ubuntu0~20.04.1+esm7","3.9.5-3ubuntu0~20.04.1+esm8","3.9.5-3ubuntu0~20.04.1+esm9","3.9.5-3ubuntu0~20.04.1+esm10","3.9.5-3ubuntu0~20.04.1+esm11"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"python3.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.12-1~22.04.16"}]}],"versions":["3.10.0-2","3.10.0-3","3.10.0-4","3.10.0-5","3.10.0-5build1","3.10.1-1","3.10.1-2","3.10.2-1","3.10.2-5","3.10.2-7","3.10.3-1","3.10.4-3","3.10.4-3ubuntu0.1","3.10.6-1~22.04","3.10.6-1~22.04.1","3.10.6-1~22.04.2","3.10.6-1~22.04.2ubuntu1","3.10.6-1~22.04.2ubuntu1.1","3.10.12-1~22.04.2","3.10.12-1~22.04.3","3.10.12-1~22.04.4","3.10.12-1~22.04.5","3.10.12-1~22.04.6","3.10.12-1~22.04.7","3.10.12-1~22.04.8","3.10.12-1~22.04.9","3.10.12-1~22.04.10","3.10.12-1~22.04.11","3.10.12-1~22.04.12","3.10.12-1~22.04.13","3.10.12-1~22.04.14","3.10.12-1~22.04.15"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.18-8build1","2.7.18-13","2.7.18-13ubuntu1","2.7.18-13ubuntu1.1","2.7.18-13ubuntu1.1+esm2","2.7.18-13ubuntu1.2","2.7.18-13ubuntu1.2+esm1","2.7.18-13ubuntu1.2+esm2","2.7.18-13ubuntu1.2+esm3","2.7.18-13ubuntu1.3","2.7.18-13ubuntu1.3+esm1","2.7.18-13ubuntu1.4","2.7.18-13ubuntu1.4+esm1","2.7.18-13ubuntu1.5","2.7.18-13ubuntu1.5+esm2","2.7.18-13ubuntu1.5+esm3","2.7.18-13ubuntu1.5+esm5","2.7.18-13ubuntu1.5+esm6","2.7.18-13ubuntu1.5+esm7","2.7.18-13ubuntu1.5+esm8","2.7.18-13ubuntu1.5+esm9"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.11.0~rc1-1~22.04","3.11.0~rc1-1~22.04.1~esm1","3.11.0~rc1-1~22.04.1~esm2","3.11.0~rc1-1~22.04.1~esm3","3.11.0~rc1-1~22.04.1~esm4","3.11.0~rc1-1~22.04.1~esm5","3.11.0~rc1-1~22.04.1~esm6","3.11.0~rc1-1~22.04.1~esm7","3.11.0~rc1-1~22.04.1~esm8","3.11.0~rc1-1~22.04.1~esm9","3.11.0~rc1-1~22.04.1","3.11.0~rc1-1~22.04.1+esm1","3.11.0~rc1-1~22.04.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.3-1ubuntu0.15"}]}],"versions":["3.12.0-1","3.12.0-5","3.12.0-6","3.12.0-7","3.12.1-2","3.12.2-1","3.12.2-4build3","3.12.2-4build4","3.12.2-5ubuntu3","3.12.3-1","3.12.3-1ubuntu0.1","3.12.3-1ubuntu0.2","3.12.3-1ubuntu0.3","3.12.3-1ubuntu0.4","3.12.3-1ubuntu0.5","3.12.3-1ubuntu0.6","3.12.3-1ubuntu0.7","3.12.3-1ubuntu0.8","3.12.3-1ubuntu0.9","3.12.3-1ubuntu0.10","3.12.3-1ubuntu0.11","3.12.3-1ubuntu0.12","3.12.3-1ubuntu0.13"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"python3.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.13.3-1","3.13.3-2","3.13.3-4","3.13.4-1","3.13.5-1","3.13.5-2","3.13.6-1","3.13.7-1","3.13.7-1ubuntu0.1","3.13.7-1ubuntu0.2","3.13.7-1ubuntu0.3","3.13.7-1ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.14.0~a7-0ubuntu1","3.14.0~b1-1","3.14.0~b3-1","3.14.0~rc1-1","3.14.0~rc2-1","3.14.0~rc3-1","3.14.0-1","3.14.0-1ubuntu0.1","3.14.0-1ubuntu0.2","3.14.0-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"python3.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.12-1~22.04.16"}]}],"versions":["3.10.0-2","3.10.0-3","3.10.0-4","3.10.0-5","3.10.0-5build1","3.10.1-1","3.10.1-2","3.10.2-1","3.10.2-5","3.10.2-7","3.10.3-1","3.10.4-3","3.10.4-3ubuntu0.1","3.10.6-1~22.04","3.10.6-1~22.04.1","3.10.6-1~22.04.2","3.10.6-1~22.04.2ubuntu1","3.10.6-1~22.04.2ubuntu1.1","3.10.12-1~22.04.2","3.10.12-1~22.04.3","3.10.12-1~22.04.4","3.10.12-1~22.04.5","3.10.12-1~22.04.6","3.10.12-1~22.04.7","3.10.12-1~22.04.8","3.10.12-1~22.04.9","3.10.12-1~22.04.10","3.10.12-1~22.04.11","3.10.12-1~22.04.12","3.10.12-1~22.04.13","3.10.12-1~22.04.14","3.10.12-1~22.04.15"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.3-1ubuntu0.15"}]}],"versions":["3.12.0-1","3.12.0-5","3.12.0-6","3.12.0-7","3.12.1-2","3.12.2-1","3.12.2-4build3","3.12.2-4build4","3.12.2-5ubuntu3","3.12.3-1","3.12.3-1ubuntu0.1","3.12.3-1ubuntu0.2","3.12.3-1ubuntu0.3","3.12.3-1ubuntu0.4","3.12.3-1ubuntu0.5","3.12.3-1ubuntu0.6","3.12.3-1ubuntu0.7","3.12.3-1ubuntu0.8","3.12.3-1ubuntu0.9","3.12.3-1ubuntu0.10","3.12.3-1ubuntu0.11","3.12.3-1ubuntu0.12","3.12.3-1ubuntu0.13"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-1ubuntu0.1"}]}],"versions":["3.14.0-1","3.14.0-2","3.14.0-4","3.14.2-1","3.14.3-1","3.14.3-2","3.14.3-3","3.14.3-5","3.14.4-1"],"bundled":18},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python315","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.0~a7-3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.20-3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.15-4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.12-3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python314","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.3-4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.13-160000.1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python313-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.13-160000.1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python313-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.13-160000.1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python313-nogil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.13-160000.1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python313-nogil-nogil-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.13-160000.1.1"}]}],"bundled":7}],"products":[{"vendor":"python","product":"python"},{"vendor":"python software foundation","product":"cpython"}],"references":[{"url":"https://github.com/python/cpython/pull/143934","tags":["patch","Issue Tracking","Patch","web","fix","article"]},{"url":"https://github.com/python/cpython/issues/141707","tags":["issue-tracking","Issue Tracking","web","report","article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/EOMI5I66ZMKQ2INNFT6T7IAIKUGPZYIE/","tags":["vendor-advisory","Mailing List","Vendor Advisory","web","advisory","article"]},{"url":"https://github.com/python/cpython/commit/42d754e34c06e57ad6b8e7f92f32af679912d8ab","tags":["patch","Patch","web","fix"]},{"url":"https://github.com/python/cpython/commit/7ad3093d76a748af55bdb1d2e8aad3638163b017","tags":["patch","Patch","web","fix"]},{"url":"https://github.com/python/cpython/commit/ae99fe3a33b43e303a05f012815cef60b611a9c7","tags":["patch","Patch","web","fix"]},{"url":"https://github.com/python/cpython/commit/72dde1016493c52abe857fc4a7bf6c40138b4114","tags":["patch","Patch","fix"]},{"url":"https://github.com/python/cpython/commit/9a23b753552afa28e3a2f4d8863572fc66479406","tags":["patch","Patch","fix"]},{"url":"https://github.com/python/cpython/commit/d10950739a78f54d0718d88fb5a868374603c084","tags":["patch","Patch","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13462","tags":["web","advisory"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/EOMI5I66ZMKQ2INNFT6T7IAIKUGPZYIE"},{"url":"https://github.com/advisories/GHSA-9qpv-486p-2v4h"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-13462","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1781082390.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1781082676.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1781083045.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1781083526.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1781083779.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1781086040.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1781104507.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1781107808.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1781173352.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0672","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4224","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1781174666.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1781176375.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1781205404.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7210","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1781259901.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1781342809.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1781525675.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-26116","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28861","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3737","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0391","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45061","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48560","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48564","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48565","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1781527577.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1781528783.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1783703079.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1783705997.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/13xxx/CVE-2025-13462.json","tags":["advisory"]},{"url":"https://github.com/python/cpython","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-13462","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1899","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3479","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1900","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1901","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1902","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:10118","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13462","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3446","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3479","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10118.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2447082","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13462","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457410","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3446","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3446","tags":["advisory"]},{"url":"https://github.com/python/cpython/commit/1f9958f909c1b41a4ffc0b613ef8ec8fa5e7c474","tags":["article"]},{"url":"https://github.com/python/cpython/commit/4561f6418a691b3e89aef0901f53fe0dfb7f7c0e","tags":["article"]},{"url":"https://github.com/python/cpython/commit/e31c55121620189a0d1a07b689762d8ca9c1b7fa","tags":["article"]},{"url":"https://github.com/python/cpython/issues/145264","tags":["article"]},{"url":"https://github.com/python/cpython/pull/145267","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/F5ZT5ICGJ6CKXVUJ34YBVY7WOZ5SHG53/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2448746","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3479","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/146121","tags":["article"]},{"url":"https://github.com/python/cpython/pull/146122","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/WYLLVQOOCKGK73JM7Z7ZSNOJC4N7BAWY/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:11324","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11324.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7443","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-5713","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4224","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3644","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-1299","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0865","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-6075","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13837","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13836","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11468","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-8291","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-12084","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4519","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2297","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-15282","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-15367","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7443.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2408891","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-6075","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6075","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/136065","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/IUP5QJ6D4KK6ULHOMPC7DPNKRYQTQNLA/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402342","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-8291","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8291","tags":["advisory"]},{"url":"https://github.com/python/cpython/commit/162997bb70e067668c039700141770687bc8f267","tags":["article"]},{"url":"https://github.com/python/cpython/commit/333d4a6f4967d3ace91492a39ededbcf3faa76a6","tags":["article"]},{"url":"https://github.com/python/cpython/issues/139700","tags":["article"]},{"url":"https://github.com/python/cpython/pull/139702","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/QECOPWMTH4VPPJAXAH2BGTA4XADOP62G/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2431375","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11468","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11468","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/143935","tags":["article"]},{"url":"https://github.com/python/cpython/pull/143936","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/FELSEOLBI2QR6YLG6Q7VYF7FWSGQTKLI/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2418655","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-12084","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-12084","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/142145","tags":["article"]},{"url":"https://github.com/python/cpython/pull/142146","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2418078","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13836","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13836","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/119451","tags":["article"]},{"url":"https://github.com/python/cpython/pull/119454","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2418084","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13837","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13837","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/119342","tags":["article"]},{"url":"https://github.com/python/cpython/pull/119343","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2431366","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-15282","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15282","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/143925","tags":["article"]},{"url":"https://github.com/python/cpython/pull/143926","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/X66HL7SISGJT33J53OHXMZT4DFLMHVKF/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2431373","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-15367","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15367","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/143923","tags":["article"]},{"url":"https://github.com/python/cpython/pull/143924","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/CBFBOWVGGUJFSGITQCCBZS4GEYYZ7ZNE/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2431367","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0865","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0865","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/143916","tags":["article"]},{"url":"https://github.com/python/cpython/pull/143917","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/BJ6QPHNSHJTS3A7CFV6IBMCAP2DWRVNT/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2432437","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-1299","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1299","tags":["advisory"]},{"url":"https://cve.org/CVERecord?id=CVE-2024-6923","tags":["article"]},{"url":"https://github.com/python/cpython/commit/052e55e7d44718fe46cbba0ca995cb8fcc359413","tags":["article"]},{"url":"https://github.com/python/cpython/issues/144125","tags":["article"]},{"url":"https://github.com/python/cpython/pull/144126","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/6ZZULGALJTITEAGEXLDJE2C6FORDXPBT/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2444691","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2297","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2297","tags":["advisory"]},{"url":"https://github.com/python/cpython/commit/482d6f8bdba9da3725d272e8bb4a2d25fb6a603e","tags":["article"]},{"url":"https://github.com/python/cpython/commit/a51b1b512de1d56b3714b65628a2eae2b07e535e","tags":["article"]},{"url":"https://github.com/python/cpython/commit/e58e9802b9bec5cdbf48fc9bf1da5f4fda482e86","tags":["article"]},{"url":"https://github.com/python/cpython/issues/145506","tags":["article"]},{"url":"https://github.com/python/cpython/pull/145507","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2448168","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3644","tags":["advisory"]},{"url":"https://github.com/python/cpython/commit/57e88c1cf95e1481b94ae57abe1010469d47a6b4","tags":["article"]},{"url":"https://github.com/python/cpython/issues/145599","tags":["article"]},{"url":"https://github.com/python/cpython/pull/145600","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2448181","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4224","tags":["advisory"]},{"url":"https://github.com/python/cpython/commit/196edfb06a7458377d4d0f4b3cd41724c1f3bd4a","tags":["article"]},{"url":"https://github.com/python/cpython/commit/e0a8a6da90597a924b300debe045cdb4628ee1f3","tags":["article"]},{"url":"https://github.com/python/cpython/commit/eb0e8be3a7e11b87d198a2c3af1ed0eccf532768","tags":["article"]},{"url":"https://github.com/python/cpython/issues/145986","tags":["article"]},{"url":"https://github.com/python/cpython/pull/145987","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/5M7CGUW3XBRY7II4DK43KF7NQQ3TPZ6R/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2449649","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4519","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4519","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/143930","tags":["article"]},{"url":"https://github.com/python/cpython/pull/143931","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458239","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-5713","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5713","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/148178","tags":["article"]},{"url":"https://github.com/python/cpython/pull/148187","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/OG4RHARYSNIE22GGOMVMCRH76L5HKPLM/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7661","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7661.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261206-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259611","tags":["report"]},{"url":"https://bugzilla.suse.com/1259734","tags":["report"]},{"url":"https://bugzilla.suse.com/1259735","tags":["report"]},{"url":"https://bugzilla.suse.com/1260026","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4519","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261292-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259989","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3479","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261296-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261345-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261349-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1252974","tags":["report"]},{"url":"https://bugzilla.suse.com/1254400","tags":["report"]},{"url":"https://bugzilla.suse.com/1254401","tags":["report"]},{"url":"https://bugzilla.suse.com/1254997","tags":["report"]},{"url":"https://bugzilla.suse.com/1257029","tags":["report"]},{"url":"https://bugzilla.suse.com/1257031","tags":["report"]},{"url":"https://bugzilla.suse.com/1257042","tags":["report"]},{"url":"https://bugzilla.suse.com/1257046","tags":["report"]},{"url":"https://bugzilla.suse.com/1257181","tags":["report"]},{"url":"https://bugzilla.suse.com/1259240","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13837","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-15282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2297","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261354-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261376-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261385-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261417-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261530-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261715-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1261969","tags":["report"]},{"url":"https://bugzilla.suse.com/1261970","tags":["report"]},{"url":"https://bugzilla.suse.com/1262098","tags":["report"]},{"url":"https://bugzilla.suse.com/1262319","tags":["report"]},{"url":"https://bugzilla.suse.com/1262654","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6100","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621104-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621178-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621254-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623743-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1264962","tags":["report"]},{"url":"https://bugzilla.suse.com/1265268","tags":["report"]},{"url":"https://bugzilla.suse.com/1267581","tags":["report"]},{"url":"https://bugzilla.suse.com/1267821","tags":["report"]},{"url":"https://bugzilla.suse.com/1267974","tags":["report"]},{"url":"https://bugzilla.suse.com/1268977","tags":["report"]},{"url":"https://bugzilla.suse.com/1269066","tags":["report"]},{"url":"https://bugzilla.suse.com/1269788","tags":["report"]},{"url":"https://bugzilla.suse.com/1269959","tags":["report"]},{"url":"https://bugzilla.suse.com/1271192","tags":["report"]},{"url":"https://bugzilla.suse.com/1276223","tags":["report"]},{"url":"https://bugzilla.suse.com/1276226","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9669","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264534-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1276227","tags":["report"]},{"url":"https://bugzilla.suse.com/1277111","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19672","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2025-13462","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8509-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-4189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-69534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-0672","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-1299","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-1502","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-2297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-3276","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-3644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-4224","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-4519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-4786","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-5713","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-6019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-6100","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-7774","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-8328","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-9669","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-13462","title":"tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling","description":"The \"tarfile\" module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.","status":"published","published":"2026-03-12T17:59:26.62Z","modified":"2026-08-13T00:30:19.927Z","cvss":[{"version":"4.0","score":2,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","level":"low","assessor":"cna"}],"cwes":["CWE-434","CWE-74","CWE-20"],"updated_at":"2026-11-02T14:32:43.10004Z"}],"euvd":[{"id":"EUVD-2025-208613","description":"The \"tarfile\" module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.","status":"published","published":"2026-03-12T17:59:26Z","modified":"2026-08-13T00:30:19Z","cvss":[{"version":"4.0","score":2,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","level":"low"}],"updated_at":"2026-11-02T18:01:57.213133Z"}],"ghsa":[{"id":"GHSA-9qpv-486p-2v4h","title":"The \"tarfile\" module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even...","description":"The \"tarfile\" module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.","status":"published","published":"2026-03-12T18:30:31Z","modified":"2026-06-05T21:32:55Z","cvss":[{"version":"4.0","score":2,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:08:36.196175Z"}],"nvd":[{"id":"CVE-2025-13462","description":"The \"tarfile\" module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.","status":"published","published":"2026-03-12T18:16:21.397Z","modified":"2026-08-13T01:16:50.98Z","cvss":[{"version":"4.0","score":2,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low","assessor":"secondary"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-20","CWE-74","CWE-434"],"updated_at":"2026-11-02T14:12:01.641503Z"}],"osv":[{"id":"BELL-CVE-2025-13462","status":"published","published":"2026-03-15T06:09:25.517733Z","modified":"2026-08-26T01:10:28.463666188Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:28:21.227396Z"},{"id":"CVE-2025-13462","title":"tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling","description":"The \"tarfile\" module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.","status":"published","published":"2026-03-12T17:59:26.62Z","modified":"2026-11-10T10:45:38.455116993Z","cvss":[{"version":"4.0","score":2,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","level":"low"}],"updated_at":"2026-11-10T10:57:25.458985Z"},{"id":"DEBIAN-CVE-2025-13462","description":"The \"tarfile\" module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.","status":"published","published":"2026-03-12T18:16:21.397Z","modified":"2026-11-01T17:00:08.208627283Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:45.102284Z"},{"id":"OESA-2026-1899","title":"python3 security update","description":"Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.\r\n\r\nSecurity Fix(es):\n\nThe \u0026quot;tarfile\u0026quot; module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.(CVE-2025-13462)\n\nDISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open(). The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model.\n\npkgutil.get_data() did not validate the resource argument as documented, allowing path traversals.(CVE-2026-3479)\n\nThe fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().(CVE-2026-3644)\n\nWhen an Expat parser with a registered ElementDeclHandler parses an inline\ndocument type definition containing a deeply nested content model a C stack\noverflow occurs.(CVE-2026-4224)","status":"published","published":"2026-04-11T11:10:55Z","modified":"2026-08-18T01:19:55.322773426Z","cvss":[{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1900","title":"python3 security update","description":"Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.\r\n\r\nSecurity Fix(es):\n\nThe \u0026quot;tarfile\u0026quot; module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.(CVE-2025-13462)\n\nDISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open(). The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model.\n\npkgutil.get_data() did not validate the resource argument as documented, allowing path traversals.(CVE-2026-3479)\n\nThe fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().(CVE-2026-3644)\n\nWhen an Expat parser with a registered ElementDeclHandler parses an inline\ndocument type definition containing a deeply nested content model a C stack\noverflow occurs.(CVE-2026-4224)","status":"published","published":"2026-04-11T11:10:55Z","modified":"2026-08-18T01:19:55.310474869Z","cvss":[{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1901","title":"python3 security update","description":"Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.\r\n\r\nSecurity Fix(es):\n\nThe \u0026quot;tarfile\u0026quot; module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.(CVE-2025-13462)\n\nDISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open(). The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model.\n\npkgutil.get_data() did not validate the resource argument as documented, allowing path traversals.(CVE-2026-3479)\n\nThe fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().(CVE-2026-3644)\n\nWhen an Expat parser with a registered ElementDeclHandler parses an inline\ndocument type definition containing a deeply nested content model a C stack\noverflow occurs.(CVE-2026-4224)","status":"published","published":"2026-04-11T11:10:55Z","modified":"2026-08-18T01:19:55.298545714Z","cvss":[{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1902","title":"python3 security update","description":"Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.\r\n\r\nSecurity Fix(es):\n\nThe \u0026quot;tarfile\u0026quot; module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.(CVE-2025-13462)\n\nDISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open(). The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model.\n\npkgutil.get_data() did not validate the resource argument as documented, allowing path traversals.(CVE-2026-3479)\n\nThe fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().(CVE-2026-3644)\n\nWhen an Expat parser with a registered ElementDeclHandler parses an inline\ndocument type definition containing a deeply nested content model a C stack\noverflow occurs.(CVE-2026-4224)","status":"published","published":"2026-04-11T11:10:55Z","modified":"2026-08-18T01:19:55.322685106Z","cvss":[{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"RHSA-2026:10118","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-04-24T10:06:38Z","modified":"2026-10-06T10:31:19.983143931Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:11324","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-04-28T10:08:11Z","modified":"2026-10-06T10:31:13.956973262Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:7443","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-20T10:11:15Z","modified":"2026-10-16T10:25:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:7661","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-20T10:11:18Z","modified":"2026-10-16T10:25:46Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"UBUNTU-CVE-2025-13462","description":"The \"tarfile\" module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.","status":"published","published":"2026-03-12T18:16:00Z","modified":"2026-09-08T19:45:10.722927789Z","cvss":[{"version":"4.0","score":2,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","level":"low"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T16:55:20.144818Z"},{"id":"AZL-109686","title":"CVE-2025-13462 affecting package python-py 1.11.0-1","description":"The \"tarfile\" module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.","status":"published","published":"2026-03-12T18:16:21Z","modified":"2026-10-27T05:36:16Z","updated_at":"2026-11-02T15:28:02.044071Z"},{"id":"AZL-80493","title":"CVE-2025-13462 affecting package python3 for versions less than 3.12.9-13","description":"The \"tarfile\" module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.","status":"published","published":"2026-03-12T18:16:21Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.800038Z"},{"id":"BIT-libpython-2025-13462","title":"tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling","description":"The \"tarfile\" module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.","status":"withdrawn","published":"2026-03-14T08:42:41.133Z","modified":"2026-03-27T08:56:26.347962647Z","updated_at":"2026-11-02T15:28:32.162822Z"},{"id":"BIT-python-2025-13462","title":"tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling","description":"The \"tarfile\" module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.","status":"withdrawn","published":"2026-03-14T08:49:56.012Z","modified":"2026-03-27T08:48:14.726683Z","updated_at":"2026-11-02T15:28:34.724063Z"},{"id":"BIT-python-min-2025-13462","title":"tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling","description":"The \"tarfile\" module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.","status":"withdrawn","published":"2026-03-14T08:49:56.256Z","modified":"2026-03-27T08:48:08.246569Z","updated_at":"2026-11-02T15:28:34.724063Z"},{"id":"CLSA-2026-1781082390","title":"Fix CVE(s): CVE-2025-13462","description":"   * SECURITY UPDATE: tarfile module misinterprets AREGTYPE blocks as\n     DIRTYPE when processing GNU long name or link headers\n     - debian/patches/CVE-2025-13462.patch: add dircheck parameter to\n       frombuf() and fromtarfile() and pass dircheck=False from\n       _proc_gnulong() and _proc_pax() to prevent AREGTYPE-to-DIRTYPE\n       normalisation on follow-up headers in Lib/tarfile.py,\n       Lib/test/test_tarfile.py\n     - CVE-2025-13462","status":"published","published":"2026-06-10T09:06:47Z","modified":"2026-10-26T09:32:05.182340743Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781082676","title":"python3: Fix of CVE-2025-13462","description":"- CVE-2025-13462: tarfile: skip AREGTYPE-\u003eDIRTYPE normalization while reading\n  GNU LONGNAME/LONGLINK and PAX follow-up headers, so a longname regular file\n  is not misparsed as a directory","status":"published","published":"2026-06-10T09:12:35Z","modified":"2026-10-26T09:31:37.599059662Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781083045","title":"python3.11: Fix of CVE-2025-13462","description":"- CVE-2025-13462: tarfile: skip AREGTYPE-\u003eDIRTYPE normalization while reading\n  GNU LONGNAME/LONGLINK and PAX follow-up headers, so a longname regular file\n  is not misparsed as a directory","status":"published","published":"2026-06-10T09:19:07Z","modified":"2026-10-26T09:31:08.042855686Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781083526","title":"python3: Fix of CVE-2025-13462","description":"- CVE-2025-13462: tarfile: skip AREGTYPE-\u003eDIRTYPE normalization while reading\n  GNU LONGNAME/LONGLINK and PAX follow-up headers, so a longname regular file\n  is not misparsed as a directory","status":"published","published":"2026-06-10T09:26:49Z","modified":"2026-10-26T09:31:44.616063628Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781083779","title":"python3: Fix of CVE-2025-13462","description":"- CVE-2025-13462: tarfile: skip AREGTYPE-\u003eDIRTYPE normalization while reading\n  GNU LONGNAME/LONGLINK and PAX follow-up headers, so a longname regular file\n  is not misparsed as a directory","status":"published","published":"2026-06-10T09:31:08Z","modified":"2026-10-26T09:31:49.71715594Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781086040","title":"python3.11: Fix of CVE-2025-13462","description":"- CVE-2025-13462: do not apply the v7 AREGTYPE-\u003eDIRTYPE normalization when re-parsing GNU\n  LONGNAME/LONGLINK follow-up headers in tarfile, preventing crafted archives from\n  flipping an entry's type","status":"published","published":"2026-06-10T10:08:50Z","modified":"2026-10-26T09:30:18.934854926Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781104507","title":"python3.9: Fix of CVE-2025-13462","description":"- CVE-2025-13462: do not apply the v7 AREGTYPE-\u003eDIRTYPE normalization\n  when re-parsing GNU LONGNAME/LONGLINK follow-up headers in tarfile,\n  preventing crafted archives from flipping an entry's type","status":"published","published":"2026-06-10T15:15:23Z","modified":"2026-10-26T09:30:18.936610541Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781107808","title":"python3.9: Fix of CVE-2025-13462","description":"- CVE-2025-13462: tarfile: skip AREGTYPE-\u003eDIRTYPE normalization while reading\n  GNU LONGNAME/LONGLINK and PAX follow-up headers, so a longname regular file\n  is not misparsed as a directory","status":"published","published":"2026-06-10T16:10:24Z","modified":"2026-10-26T09:31:10.285405246Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781173352","title":"Fix CVE(s): CVE-2025-13462, CVE-2026-0672, CVE-2026-3644, CVE-2026-4224","description":"   * SECURITY UPDATE: C stack overflow (DoS) in pyexpat when parsing deeply\n     nested DTD content models\n     - debian/patches/CVE-2026-4224.patch: guard conv_content_model() in\n       Modules/pyexpat.c with Py_EnterRecursiveCall/Py_LeaveRecursiveCall to\n       bound recursion when a registered ElementDeclHandler converts a deeply\n       nested content model.\n     - CVE-2026-4224\n   * SECURITY UPDATE: HTTP header injection via control characters in cookies\n     - debian/patches/CVE-2026-0672.patch: add _has_control_character() and\n       reject control characters in Morsel.__setitem__()/setdefault()/set()\n       and BaseCookie.output() in Lib/http/cookies.py.\n     - CVE-2026-0672\n   * SECURITY UPDATE: incomplete fix for CVE-2026-0672 (control characters in\n     cookies via additional Morsel paths)\n     - debian/patches/CVE-2026-3644.patch: reject control characters in\n       Morsel.update(), Morsel.__setstate__() and Morsel.js_output() in\n       Lib/http/cookies.py.\n     - CVE-2026-3644\n   * SECURITY UPDATE: tarfile member type confusion (regular file parsed as\n     directory) via GNU long name/link headers\n     - debian/patches/CVE-2025-13462.patch: skip the AREGTYPE-\u003eDIRTYPE\n       normalization while reading GNU LONGNAME/LONGLINK and PAX follow-up\n       headers (dircheck=False) in Lib/tarfile.py.\n     - CVE-2025-13462","status":"published","published":"2026-06-11T10:26:46Z","modified":"2026-10-26T09:32:00.767515318Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781174666","title":"Fix CVE(s): CVE-2025-13462, CVE-2026-0672, CVE-2026-3644, CVE-2026-4224","description":"   * SECURITY UPDATE: C stack overflow (DoS) in pyexpat when parsing deeply\n     nested DTD content models\n     - debian/patches/CVE-2026-4224.patch: guard conv_content_model() in\n       Modules/pyexpat.c with Py_EnterRecursiveCall/Py_LeaveRecursiveCall to\n       bound recursion when a registered ElementDeclHandler converts a deeply\n       nested content model.\n     - CVE-2026-4224\n   * SECURITY UPDATE: HTTP header injection via control characters in cookies\n     - debian/patches/CVE-2026-0672.patch: add _has_control_character() and\n       reject control characters in Morsel.__setitem__()/setdefault()/set()\n       and BaseCookie.output() in Lib/http/cookies.py.\n     - CVE-2026-0672\n   * SECURITY UPDATE: incomplete fix for CVE-2026-0672 (control characters in\n     cookies via additional Morsel paths)\n     - debian/patches/CVE-2026-3644.patch: reject control characters in\n       Morsel.update(), Morsel.__setstate__() and Morsel.js_output() in\n       Lib/http/cookies.py.\n     - CVE-2026-3644\n   * SECURITY UPDATE: tarfile member type confusion (regular file parsed as\n     directory) via GNU long name/link headers\n     - debian/patches/CVE-2025-13462.patch: skip the AREGTYPE-\u003eDIRTYPE\n       normalization while reading GNU LONGNAME/LONGLINK and PAX follow-up\n       headers (dircheck=False) in Lib/tarfile.py.\n     - CVE-2025-13462","status":"published","published":"2026-06-11T10:47:05Z","modified":"2026-10-26T09:32:03.516182037Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781176375","title":"Fix CVE(s): CVE-2025-13462, CVE-2026-0672, CVE-2026-3644, CVE-2026-4224","description":"   * SECURITY UPDATE: C stack overflow (DoS) in pyexpat when parsing deeply\n     nested DTD content models\n     - debian/patches/CVE-2026-4224.patch: guard conv_content_model() in\n       Modules/pyexpat.c with Py_EnterRecursiveCall/Py_LeaveRecursiveCall to\n       bound recursion when a registered ElementDeclHandler converts a deeply\n       nested content model.\n     - CVE-2026-4224\n   * SECURITY UPDATE: HTTP header injection via control characters in cookies\n     - debian/patches/CVE-2026-0672.patch: reject control characters in\n       Morsel.__setitem__()/set(), add a validating Morsel.setdefault()\n       override, and guard BaseCookie.output() in Lib/Cookie.py.\n     - CVE-2026-0672\n   * SECURITY UPDATE: incomplete fix for CVE-2026-0672 (control characters in\n     cookies via additional Morsel paths)\n     - debian/patches/CVE-2026-3644.patch: add a validating Morsel.update()\n       override and reject control characters in Morsel.js_output() in\n       Lib/Cookie.py.\n     - CVE-2026-3644\n   * SECURITY UPDATE: tarfile member type confusion (regular file parsed as\n     directory) via GNU long name/link headers\n     - debian/patches/CVE-2025-13462.patch: skip the AREGTYPE-\u003eDIRTYPE\n       normalization while reading GNU LONGNAME/LONGLINK and PAX follow-up\n       headers (dircheck=False) in Lib/tarfile.py.\n     - CVE-2025-13462","status":"published","published":"2026-06-11T11:15:35Z","modified":"2026-10-26T09:32:03.579381079Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781205404","title":"Fix CVE(s): CVE-2025-13462, CVE-2026-4224, CVE-2026-7210","description":"   * SECURITY UPDATE: tarfile misinterprets crafted multi-block GNU long name\n     archives via AREGTYPE/DIRTYPE normalization\n     - debian/patches/CVE-2025-13462.patch: skip the old-v7 AREGTYPE to DIRTYPE\n       normalization when reading the follow-up header of a GNU LONGNAME /\n       LONGLINK or PAX member in Lib/tarfile.py\n     - CVE-2025-13462\n   * SECURITY UPDATE: C stack overflow in pyexpat when an ElementDeclHandler\n     parses a deeply nested content model\n     - debian/patches/CVE-2026-4224.patch: guard conv_content_model() recursion\n       with Py_EnterRecursiveCall()/Py_LeaveRecursiveCall() in Modules/pyexpat.c\n     - CVE-2026-4224\n   * SECURITY UPDATE: insufficient entropy in pyexpat/_elementtree hash-flooding\n     protection\n     - debian/patches/CVE-2026-7210.patch: bind XML_SetHashSalt16Bytes as a weak\n       symbol to seed the Expat parser with 16 bytes of entropy when hash\n       randomization is enabled; falls back to the legacy XML_SetHashSalt when\n       unavailable. Requires libexpat1 (\u003e= 2.2.6-2+deb10u7+tuxcare.els6).\n     - CVE-2026-7210","status":"published","published":"2026-06-11T19:17:09Z","modified":"2026-10-26T09:31:52.227314483Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781259901","title":"Fix CVE(s): CVE-2025-13462, CVE-2026-3644, CVE-2026-4224, CVE-2026-7210","description":"   * SECURITY UPDATE: tarfile AREGTYPE-\u003eDIRTYPE misnormalization of multi-block member headers\n     - debian/patches/CVE-2025-13462.patch: in Lib/tarfile.py, add a dircheck flag to\n       frombuf()/fromtarfile() and read the follow-up header of GNU long-name and PAX\n       multi-block members with dircheck=False in _proc_gnulong()/_proc_pax(), so the old-V7\n       \"AREGTYPE name ending in / is a directory\" normalization is no longer applied to a\n       follow-up header based on its truncated name. Prevents a crafted tar archive from being\n       interpreted differently by tarfile than by other tools. Backport of upstream commit\n       42d754e34c (gh-141707), the same fix shipped by Debian in DLA-4583-1; applies to 3.7.3\n       without code changes (the affected functions are structurally identical). Bundles the\n       upstream regression test test_longname_file_not_directory (test_tarfile.py).\n     - CVE-2025-13462\n   * SECURITY UPDATE: C stack overflow in pyexpat via deeply nested DTD content model\n     - debian/patches/CVE-2026-4224.patch: guard the recursion in Modules/pyexpat.c\n       conv_content_model() with Py_EnterRecursiveCall()/Py_LeaveRecursiveCall() so a deeply\n       nested inline DTD content model parsed by an Expat parser with a registered\n       ElementDeclHandler raises RecursionError instead of crashing the interpreter. Adapted\n       from upstream commit eb0e8be3a7 (gh-145986); upstream uses the private\n       _Py_EnterRecursiveCall() API, replaced here with the equivalent public 3.7 macros. The\n       upstream regression test is not bundled (it needs 3.7-absent test.support helpers and a\n       500000-deep model); the fix was verified manually.\n     - CVE-2026-4224\n   * SECURITY UPDATE: control-character injection in http.cookies (HTTP response splitting)\n     - debian/patches/CVE-2026-3644.patch: reject control characters (\\x00-\\x1F, \\x7F) in\n       Lib/http/cookies.py across all Morsel/BaseCookie paths via a new _has_control_character()\n       helper. CVE-2026-3644 is the incomplete-fix follow-up to CVE-2026-0672 and its upstream\n       fix (commit 57e88c1cf9, gh-145599) depends on the helper introduced by the CVE-2026-0672\n       base commit (95746b3a13, gh-143919). 3.7.3 shipped neither fix, so this patch bundles both:\n       the base validation in Morsel.__setitem__/setdefault/set and BaseCookie.output, plus the\n       follow-up validation in Morsel.update/__setstate__ and BaseCookie.js_output.\n       Also closes CVE-2026-0672. The upstream Morsel.__ior__ override is omitted: it only exists\n       to neutralize dict.__ior__ (PEP 584, Python 3.9+), which 3.7 does not have, so there is no\n       |= bypass to close. The module docstring doctest and the test_basic keebler fixture in\n       test_http_cookies.py are updated to drop a \\012 control character now rejected by load(),\n       and the upstream regression tests test_control_characters/test_control_characters_output\n       are bundled with the test.support.control_characters_c0() helper they require.\n     - CVE-2026-3644","status":"published","published":"2026-06-12T10:27:16Z","modified":"2026-10-26T09:43:11.8300495Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781342809","title":"Fix CVE(s): CVE-2025-13462, CVE-2026-0672, CVE-2026-3644, CVE-2026-4224","description":"   * SECURITY UPDATE: C stack overflow (DoS) in pyexpat when parsing deeply\n     nested DTD content models\n     - debian/patches/CVE-2026-4224.patch: guard conv_content_model() in\n       Modules/pyexpat.c with Py_EnterRecursiveCall/Py_LeaveRecursiveCall to\n       bound recursion when a registered ElementDeclHandler converts a deeply\n       nested content model.\n     - CVE-2026-4224\n   * SECURITY UPDATE: HTTP header injection via control characters in cookies\n     - debian/patches/CVE-2026-0672.patch: reject control characters in\n       Morsel.__setitem__()/set(), add a validating Morsel.setdefault()\n       override, and guard BaseCookie.output() in Lib/Cookie.py.\n     - CVE-2026-0672\n   * SECURITY UPDATE: incomplete fix for CVE-2026-0672 (control characters in\n     cookies via additional Morsel paths)\n     - debian/patches/CVE-2026-3644.patch: add a validating Morsel.update()\n       override and reject control characters in Morsel.js_output() in\n       Lib/Cookie.py.\n     - CVE-2026-3644\n   * SECURITY UPDATE: tarfile member type confusion (regular file parsed as\n     directory) via GNU long name/link headers\n     - debian/patches/CVE-2025-13462.patch: skip the AREGTYPE-\u003eDIRTYPE\n       normalization while reading GNU LONGNAME/LONGLINK and PAX follow-up\n       headers (dircheck=False) in Lib/tarfile.py.\n     - CVE-2025-13462","status":"published","published":"2026-06-13T09:27:31Z","modified":"2026-10-26T09:32:00.775591021Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781525675","title":"python3: Fix of 12 CVEs","description":"- CVE-2026-0672: reject control characters in http.cookies.Morsel fields and values\n- CVE-2026-3644: complete CVE-2026-0672 fix: reject control chars in Morsel.update(), |=, unpickling and js_output()\n- CVE-2026-4224: avoid unbound C recursion in pyexpat conv_content_model to prevent C stack overflow\n- CVE-2025-13462: skip TarInfo AREGTYPE-\u003eDIRTYPE normalization on GNU longname/longlink follow-up headers in tarfile","status":"published","published":"2026-06-25T08:49:21Z","modified":"2026-10-26T09:43:51.157178016Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781527577","title":"python3: Fix of 12 CVEs","description":"- CVE-2026-0672: reject control characters in http.cookies.Morsel fields and values\n- CVE-2026-3644: complete CVE-2026-0672 fix: reject control chars in Morsel.update(), |=, unpickling and js_output()\n- CVE-2026-4224: avoid unbound C recursion in pyexpat conv_content_model to prevent C stack overflow\n- CVE-2025-13462: skip TarInfo AREGTYPE-\u003eDIRTYPE normalization on GNU longname/longlink follow-up headers in tarfile","status":"published","published":"2026-06-25T08:45:23Z","modified":"2026-10-26T09:43:16.737388143Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781528783","title":"python3: Fix of 2 CVEs","description":"- CVE-2026-0672: reject control characters in http.cookies.Morsel fields and values\n- CVE-2026-3644: complete CVE-2026-0672 fix: reject control chars in Morsel.update(), |=, unpickling and js_output()\n- CVE-2026-4224: avoid unbound C recursion in pyexpat conv_content_model to prevent C stack overflow\n- CVE-2025-13462: skip TarInfo AREGTYPE-\u003eDIRTYPE normalization on GNU longname/longlink follow-up headers in tarfile","status":"published","published":"2026-06-15T20:44:57Z","modified":"2026-10-26T09:43:18.136186789Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1783703079","title":"python: Fix of 3 CVEs","description":"- CVE-2026-0672: reject control characters in the Cookie module - add the\n  _has_control_character() helper and validate in Morsel.__setitem__,\n  Morsel.setdefault(), Morsel.set() and BaseCookie.output(). Applied as the\n  prerequisite for CVE-2026-3644; Python 2.7.5 shipped neither fix.\n- CVE-2026-3644: reject control characters in Morsel.update(), the unpickling\n  path (Morsel.__setstate__) and Morsel.js_output().\n- CVE-2026-4224: guard conv_content_model() in pyexpat with\n  Py_EnterRecursiveCall()/Py_LeaveRecursiveCall() to avoid a C stack overflow\n  when parsing a deeply nested content model in an inline DTD with a registered\n  ElementDeclHandler.\n- CVE-2025-13462: skip the old-v7 AREGTYPE -\u003e DIRTYPE normalization in tarfile\n  when reading a follow-up header (GNU long name/link or PAX extended header),\n  so crafted multi-block members are no longer misinterpreted.","status":"published","published":"2026-07-10T17:05:13Z","modified":"2026-10-26T09:43:31.219100761Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1783705997","title":"python: Fix of 3 CVEs","description":"- CVE-2026-0672: reject control characters in the Cookie module - add the\n  _has_control_character() helper and validate in Morsel.__setitem__,\n  Morsel.setdefault(), Morsel.set() and BaseCookie.output(). Applied as the\n  prerequisite for CVE-2026-3644; Python 2.7.5 shipped neither fix.\n- CVE-2026-3644: reject control characters in Morsel.update(), the unpickling\n  path (Morsel.__setstate__) and Morsel.js_output().\n- CVE-2026-4224: guard conv_content_model() in pyexpat with\n  Py_EnterRecursiveCall()/Py_LeaveRecursiveCall() to avoid a C stack overflow\n  when parsing a deeply nested content model in an inline DTD with a registered\n  ElementDeclHandler.\n- CVE-2025-13462: skip the old-v7 AREGTYPE -\u003e DIRTYPE normalization in tarfile\n  when reading a follow-up header (GNU long name/link or PAX extended header),\n  so crafted multi-block members are no longer misinterpreted.","status":"published","published":"2026-07-11T16:58:40Z","modified":"2026-10-26T09:43:16.66087455Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"openSUSE-SU-2026:10469-1","title":"python315-3.15.0~a7-3.1 on GA media","description":"These are all security issues fixed in the python315-3.15.0~a7-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-03-31T00:00:00Z","modified":"2026-04-01T08:00:11.259601Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:10477-1","title":"python310-3.10.20-3.1 on GA media","description":"These are all security issues fixed in the python310-3.10.20-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-04-01T00:00:00Z","modified":"2026-04-02T13:31:00.080456Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:10478-1","title":"python311-3.11.15-4.1 on GA media","description":"These are all security issues fixed in the python311-3.11.15-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-04-01T00:00:00Z","modified":"2026-04-02T13:31:00.682999Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:10479-1","title":"python312-3.12.13-4.1 on GA media","description":"These are all security issues fixed in the python312-3.12.13-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-04-01T00:00:00Z","modified":"2026-04-02T13:30:59.998554Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:10480-1","title":"python313-3.13.12-3.1 on GA media","description":"These are all security issues fixed in the python313-3.13.12-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-04-01T00:00:00Z","modified":"2026-04-02T13:31:00.218121Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:10481-1","title":"python314-3.14.3-4.1 on GA media","description":"These are all security issues fixed in the python314-3.14.3-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-04-01T00:00:00Z","modified":"2026-04-02T13:31:00.245201Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:20517-1","title":"Security update for python313","description":"This update for python313 fixes the following issues:\n\nUpdate to version 3.13.13.\n\n- CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to\n  misinterpretation of tar archives (bsc#1259611).\n- CVE-2026-2297: incorrectly handled hook in FileLoader can lead to validation bypass (bsc#1259240).\n- CVE-2026-3479: improper resource argument validation in `pkgutil.get_data()` can lead to path traversal (bsc#1259989).\n- CVE-2026-3644: incomplete control character validation in http.cookies can lead to input validation bypass\n  (bsc#1259734).\n- CVE-2026-4224: parsing XML with deeply nested DTD content models can lead to C stack overflow (bsc#1259735).\n- CVE-2026-4519: failure to sanitize leading dashes in URLs in the `webbrowser.open()` API can lead to web browser\n  command line option injection (bsc#1260026).\n","status":"published","published":"2026-04-13T09:41:21Z","modified":"2026-04-22T18:26:43.093801Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"PSF-2026-10","description":"The \"tarfile\" module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.","status":"published","published":"2026-03-12T17:59:26.62Z","modified":"2026-06-05T03:45:09.881441222Z","updated_at":"2026-11-02T15:52:50.667197Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-13462","title":"CVE-2025-13462 in rootio-python3.11 - Patched by Root","description":"Root has patched CVE-2025-13462 in the rootio-python3.11 package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2026-06-15T15:21:33Z","modified":"2026-08-05T20:00:14.509866638Z","updated_at":"2026-11-02T15:53:30.983521Z"},{"id":"SUSE-SU-2026:1206-1","title":"Security update for python","description":"This update for python fixes the following issues:\n\n- CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to\n  misinterpretation of tar archives (bsc#1259611).\n- CVE-2026-3644: incomplete control character validation in http.cookies can lead to input validation bypass\n  (bsc#1259734).\n- CVE-2026-4224: parsing XML with deeply nested DTD content models can lead to C stack overflow (bsc#1259735).\n- CVE-2026-4519: failure to sanitize leading dashes in URLs in the `webbrowser.open()` API can lead to web browser\n  command line option injection (bsc#1260026).\n","status":"published","published":"2026-04-07T14:18:48Z","modified":"2026-04-08T07:50:15.671665Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1292-1","title":"Security update for python312","description":"This update for python312 fixes the following issues:\n\n- CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to\n  misinterpretation of tar archives (bsc#1259611).\n- CVE-2026-3479: improper resource argument validation in `pkgutil.get_data()` can lead to path traversal (bsc#1259989).\n- CVE-2026-3644: incomplete control character validation in http.cookies can lead to input validation bypass\n  (bsc#1259734).\n- CVE-2026-4224: parsing XML with deeply nested DTD content models can lead to C stack overflow (bsc#1259735).\n- CVE-2026-4519: failure to sanitize leading dashes in URLs in the `webbrowser.open()` API can lead to web browser\n  command line option injection (bsc#1260026).\n","status":"published","published":"2026-04-13T08:10:43Z","modified":"2026-04-14T08:28:14.111493Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1296-1","title":"Security update for python39","description":"This update for python39 fixes the following issues:\n\n- CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to\n  misinterpretation of tar archives (bsc#1259611).\n- CVE-2026-3644: incomplete control character validation in http.cookies can lead to input validation bypass\n  (bsc#1259734).\n- CVE-2026-4224: parsing XML with deeply nested DTD content models can lead to C stack overflow (bsc#1259735).\n- CVE-2026-4519: failure to sanitize leading dashes in URLs in the `webbrowser.open()` API can lead to web browser\n  command line option injection (bsc#1260026).\n","status":"published","published":"2026-04-13T12:32:48Z","modified":"2026-04-14T08:28:16.46738Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1345-1","title":"Security update for python36","description":"This update for python36 fixes the following issues:\n\n- CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611).\n- CVE-2026-3479: python: improper resource argument validation can allow path traversal (bsc#1259989).\n- CVE-2026-3644: incomplete control character validation in http.cookies (bsc#1259734).\n- CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735).\n- CVE-2026-4519: leading dashes in URLs are accepted by the `webbrowser.open()` API and allow for web browser command line option injection (bsc#1260026).\n","status":"published","published":"2026-04-15T12:04:26Z","modified":"2026-04-16T08:31:06.256564Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1349-1","title":"Security update for python311","description":"This update for python311 fixes the following issues:\n\n- Updated to Python 3.11.15\n- CVE-2025-6075: If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables (bsc#1252974).\n- CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters (bsc#1257029).\n- CVE-2025-12084: cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (bsc#1254997).\n- CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611).\n- CVE-2025-13836: When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length (bsc#1254400).\n- CVE-2025-13837: When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cause OOM and DoS issues (bsc#1254401).\n- CVE-2025-15282: user-controlled data URLs parsed may allow injecting headers (bsc#1257046).\n- CVE-2026-0672: HTTP header injection via user-controlled cookie values and parameters when using http.cookies.Morsel (bsc#1257031).\n- CVE-2026-0865: user-controlled header containing newlines can allow injecting HTTP headers (bsc#1257042).\n- CVE-2026-1299: header injection when an email is serialized due to improper newline quoting in `BytesGenerator` (bsc#1257181).\n- CVE-2026-2297: cpython: incorrectly handled hook in FileLoader can lead to validation bypass (bsc#1259240).\n- CVE-2026-3479: python: improper resource argument validation can allow path traversal (bsc#1259989).\n- CVE-2026-3644: incomplete control character validation in http.cookies (bsc#1259734).\n- CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735).\n- CVE-2026-4519: leading dashes in URLs are accepted by the `webbrowser.open()` API and allow for web browser command line option injection (bsc#1260026).\n","status":"published","published":"2026-04-15T13:35:56Z","modified":"2026-04-16T08:30:29.428484Z","updated_at":"2026-11-02T15:54:01.262144Z"}]},"sources_more":{"osv":12}}