{"id":"CVE-2026-9669","aliases":["ALPINE-CVE-2026-9669","AZL-90159","BELL-CVE-2026-9669","BIT-libpython-2026-9669","BIT-python-2026-9669","BIT-python-min-2026-9669","CLSA-2026-1789461197","CLSA-2026-1789575335","CLSA-2026-1789578322","CLSA-2026-1789578714","CLSA-2026-1789636275","CLSA-2026-1789636518","CLSA-2026-1789641197","CLSA-2026-1789661605","CLSA-2026-1789662564","CLSA-2026-1789735614","CLSA-2026-1789741774","CLSA-2026-1789747235","CLSA-2026-1789748541","CLSA-2026-1789900651","CLSA-2026-1789992787","CLSA-2026-1789993180","CLSA-2026-1789993238","CLSA-2026-1789995979","CLSA-2026-1790007232","CLSA-2026-1790072312","CLSA-2026-1790075259","DEBIAN-CVE-2026-9669","EUVD-2026-35202","GHSA-8jvr-397x-xqh9","OESA-2026-2694","OESA-2026-2695","PSF-2026-27","RHSA-2026:67572","RHSA-2026:68132","RHSA-2026:68135","RHSA-2026:68154","RHSA-2026:68309","ROOT-OS-ALPINE-320-CVE-2026-9669","ROOT-OS-DEBIAN-11-CVE-2026-9669","ROOT-OS-DEBIAN-12-CVE-2026-9669","SUSE-SU-2026:23743-1","SUSE-SU-2026:23845-1","SUSE-SU-2026:4396-1","SUSE-SU-2026:4401-1","SUSE-SU-2026:4411-1","SUSE-SU-2026:4534-1","SUSE-SU-2026:4633-1","SUSE-SU-2026:4743-1","SUSE-SU-2026:4744-1","SUSE-SU-2026:4754-1","SUSE-SU-2026:4946-1","UBUNTU-CVE-2026-9669","USN-8509-1","openSUSE-SU-2026:11181-1","openSUSE-SU-2026:11747-1","openSUSE-SU-2026:11748-1","openSUSE-SU-2026:11756-1","openSUSE-SU-2026:11757-1","openSUSE-SU-2026:11817-1"],"status":"published","title":"bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow","description":"bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.","severity":{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00428,"percentile":0.3728,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-121"],"published":"2026-06-08T22:01:15Z","modified":"2026-11-04T07:14:02Z","fixes":[{"ecosystem":"Alpine:v3.24","package":"python3","fixed_in":["3.14.7-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"python3","fixed_in":["3.12.9-14"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"python3","fixed_in":["3.11.15-r4"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"python3","fixed_in":["3.12.13-r4"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"python3","fixed_in":["3.14.5-r2"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"python3","fixed_in":["3.11.15-r4"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"python3","fixed_in":["3.12.13-r4"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"python3","fixed_in":["3.14.5-r2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"libpython","fixed_in":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.6"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"python","fixed_in":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.6"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"python-min","fixed_in":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.6"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"idle-python2.7","fixed_in":["2.7.16-2+deb10u4+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libpython2.7","fixed_in":["2.7.16-2+deb10u4+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libpython2.7-dev","fixed_in":["2.7.16-2+deb10u4+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libpython2.7-minimal","fixed_in":["2.7.16-2+deb10u4+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libpython2.7-stdlib","fixed_in":["2.7.16-2+deb10u4+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libpython2.7-testsuite","fixed_in":["2.7.16-2+deb10u4+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"python2.7","fixed_in":["2.7.16-2+deb10u4+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"python2.7-dev","fixed_in":["2.7.16-2+deb10u4+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"python2.7-doc","fixed_in":["2.7.16-2+deb10u4+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"python2.7-examples","fixed_in":["2.7.16-2+deb10u4+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"python2.7-minimal","fixed_in":["2.7.16-2+deb10u4+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"idle-python2.7","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els24"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els24"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-dev","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els24"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-minimal","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els24"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-stdlib","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els24"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-testsuite","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els24"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els24"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-dev","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els24"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-doc","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els24"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-examples","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els24"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-minimal","fixed_in":["2.7.12-1ubuntu0~16.04.18+tuxcare.els24"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"python3","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"python3-debug","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"python3-devel","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"python3-idle","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"python3-libs","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"python3-test","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"python3-tkinter","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"python3","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"python3-debug","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"python3-devel","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"python3-idle","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"python3-libs","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"python3-test","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"python3-tkinter","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"python3","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"python3-debug","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"python3-devel","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"python3-idle","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"python3-libs","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"python3-test","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"python3-tkinter","fixed_in":["3.6.8-21.0.9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"python","fixed_in":["2.6.6-70.el6.tuxcare.els30"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"python-devel","fixed_in":["2.6.6-70.el6.tuxcare.els30"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"python-libs","fixed_in":["2.6.6-70.el6.tuxcare.els30"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"python-test","fixed_in":["2.6.6-70.el6.tuxcare.els30"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"python-tools","fixed_in":["2.6.6-70.el6.tuxcare.els30"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"tkinter","fixed_in":["2.6.6-70.el6.tuxcare.els30"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"python","fixed_in":["2.6.6-70.el6.tuxcare.els30"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"python-devel","fixed_in":["2.6.6-70.el6.tuxcare.els30"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"python-libs","fixed_in":["2.6.6-70.el6.tuxcare.els30"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"python-test","fixed_in":["2.6.6-70.el6.tuxcare.els30"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"python-tools","fixed_in":["2.6.6-70.el6.tuxcare.els30"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"tkinter","fixed_in":["2.6.6-70.el6.tuxcare.els30"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python-unversioned-command","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els36"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els36"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-debug","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els36"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-devel","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els36"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-idle","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els36"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libs","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els36"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-test","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els36"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-tkinter","fixed_in":["3.9.16-1.el9_2.2.tuxcare.els36"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"idle-python2.7","fixed_in":["2.7.17-1~18.04ubuntu1.11+tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython2.7","fixed_in":["2.7.17-1~18.04ubuntu1.11+tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython2.7-dev","fixed_in":["2.7.17-1~18.04ubuntu1.11+tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython2.7-minimal","fixed_in":["2.7.17-1~18.04ubuntu1.11+tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython2.7-stdlib","fixed_in":["2.7.17-1~18.04ubuntu1.11+tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython2.7-testsuite","fixed_in":["2.7.17-1~18.04ubuntu1.11+tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"python2.7","fixed_in":["2.7.17-1~18.04ubuntu1.11+tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"python2.7-dev","fixed_in":["2.7.17-1~18.04ubuntu1.11+tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"python2.7-doc","fixed_in":["2.7.17-1~18.04ubuntu1.11+tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"python2.7-examples","fixed_in":["2.7.17-1~18.04ubuntu1.11+tuxcare.els18"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"python2.7-minimal","fixed_in":["2.7.17-1~18.04ubuntu1.11+tuxcare.els18"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"python3.11","fixed_in":["3.11.2-6+deb12u9"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"python3.13","fixed_in":["3.13.5-2+deb13u3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"python3.14","fixed_in":["3.14.6-1"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.20","package":"python3","fixed_in":["3.12.13-r00073","3.12.13-r00074","3.12.13-r00075","3.12.13-r00076"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.20","package":"rootio-python3","fixed_in":["3.12.13-r00073","3.12.13-r00074","3.12.13-r00075","3.12.13-r00076"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"python3.9","fixed_in":["3.9.2-1+deb11u7.aikido.18","3.9.2-1+deb11u7.aikido.19","3.9.2-1+deb11u7.aikido.20","3.9.2-1+deb11u7.aikido.17","3.9.2-1+deb11u7.root.io.16","3.9.2-1+deb11u7.aikido.21","3.9.2-1+deb11u7.aikido.22"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"python3-defaults","fixed_in":["3.9.2-3.aikido.1","3.9.2-3.aikido.2"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-python3.9","fixed_in":["3.9.2-1+deb11u7.aikido.18","3.9.2-1+deb11u7.aikido.19","3.9.2-1+deb11u7.aikido.20","3.9.2-1+deb11u7.aikido.17","3.9.2-1+deb11u7.root.io.16","3.9.2-1+deb11u7.aikido.21","3.9.2-1+deb11u7.aikido.22"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-python3-defaults","fixed_in":["3.9.2-3.aikido.1","3.9.2-3.aikido.2"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"python3.11","fixed_in":["3.11.2-6+deb12u8.aikido.36","3.11.2-6+deb12u8.aikido.37","3.11.2-6+deb12u8.aikido.38"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"python3-defaults","fixed_in":["3.11.2-1.aikido.1"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-python3.11","fixed_in":["3.11.2-6+deb12u8.aikido.36","3.11.2-6+deb12u8.aikido.37","3.11.2-6+deb12u8.aikido.38"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-python3-defaults","fixed_in":["3.11.2-1.aikido.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"python3.10","fixed_in":["3.10.12-1~22.04.16"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"python3.12","fixed_in":["3.12.3-1ubuntu0.15"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"python3.14","fixed_in":["3.14.4-1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.24","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.7-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.9-14"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.3-r0"},{"fixed":"3.11.15-r4"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.10-r1"},{"fixed":"3.12.13-r4"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.4-r0"},{"fixed":"3.14.5-r2"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.3-r0"},{"fixed":"3.11.15-r4"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.10-r1"},{"fixed":"3.12.13-r4"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.4-r0"},{"fixed":"3.14.5-r2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"libpython","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.10.21"},{"introduced":"3.11.0"},{"fixed":"3.11.16"},{"introduced":"3.12.0"},{"fixed":"3.12.14"},{"introduced":"3.13.0"},{"fixed":"3.13.14"},{"introduced":"3.14.0"},{"fixed":"3.14.6"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"python","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.10.21"},{"introduced":"3.11.0"},{"fixed":"3.11.16"},{"introduced":"3.12.0"},{"fixed":"3.12.14"},{"introduced":"3.13.0"},{"fixed":"3.13.14"},{"introduced":"3.14.0"},{"fixed":"3.14.6"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"python-min","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.10.21"},{"introduced":"3.11.0"},{"fixed":"3.11.16"},{"introduced":"3.12.0"},{"fixed":"3.12.14"},{"introduced":"3.13.0"},{"fixed":"3.13.14"},{"introduced":"3.14.0"},{"fixed":"3.14.6"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"idle-python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython2.7-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython2.7-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python2.7-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python2.7-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2+deb10u4+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"idle-python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els24"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els24"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els24"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els24"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els24"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython2.7-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els24"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els24"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els24"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els24"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els24"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.18+tuxcare.els24"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"idle-python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els30"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els30"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els30"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els30"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els30"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpython3.5-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els30"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els30"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els30"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els30"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els30"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els30"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python3.5-venv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els30"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"idle-python3.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els26"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython3.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els26"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython3.6-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els26"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython3.6-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els26"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython3.6-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els26"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython3.6-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els26"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els26"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3.6-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els26"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3.6-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els26"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3.6-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els26"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3.6-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els26"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3.6-venv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-1~18.04ubuntu1.12+tuxcare.els26"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-21.0.9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els30"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els30"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els30"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els30"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els30"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els30"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els30"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els30"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els30"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els30"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els30"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els30"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els17"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els17"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els17"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els17"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els17"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els17"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3.11-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.11-2.el9_6.2.tuxcare.els17"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els33"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els33"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els33"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els33"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els33"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els33"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-2.el9_2.2.tuxcare.els33"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python-unversioned-command","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els36"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els36"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els36"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els36"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els36"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els36"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els36"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.16-1.el9_2.2.tuxcare.els36"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"idle-python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython2.7-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpython2.7-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python2.7-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python2.7-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-1~18.04ubuntu1.11+tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"idle-python3.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython3.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython3.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython3.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython3.7-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpython3.7-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3.7-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3.7-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3.7-venv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-4.module_el8.4.0+2571+890116ba.tuxcare.els28"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-4.module_el8.4.0+2571+890116ba.tuxcare.els28"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-4.module_el8.4.0+2571+890116ba.tuxcare.els28"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-4.module_el8.4.0+2571+890116ba.tuxcare.els28"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-4.module_el8.4.0+2571+890116ba.tuxcare.els28"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-4.module_el8.4.0+2571+890116ba.tuxcare.els28"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-4.module_el8.4.0+2571+890116ba.tuxcare.els28"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2572+feb7e0cc.tuxcare.els27"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2572+feb7e0cc.tuxcare.els27"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2572+feb7e0cc.tuxcare.els27"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2572+feb7e0cc.tuxcare.els27"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2572+feb7e0cc.tuxcare.els27"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2572+feb7e0cc.tuxcare.els27"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2572+feb7e0cc.tuxcare.els27"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python-unversioned-command","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els21"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els21"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els21"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els21"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els21"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els21"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els21"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.21-2.el9_6.2.tuxcare.els21"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"platform-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"platform-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"platform-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-62.el8.tuxcare.els19"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"platform-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els27"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"platform-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els27"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"platform-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els27"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els27"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els27"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els27"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els27"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-42.el8.tuxcare.els27"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"idle-python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libpython2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libpython2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libpython2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libpython2.7-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libpython2.7-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"python2.7-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"python2.7-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"python2.7-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"python2.7-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-1~20.04.7+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-17.module_el8+2579+f2359962.tuxcare.els16"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python2-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-17.module_el8+2579+f2359962.tuxcare.els16"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-17.module_el8+2579+f2359962.tuxcare.els16"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-17.module_el8+2579+f2359962.tuxcare.els16"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python2-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-17.module_el8+2579+f2359962.tuxcare.els16"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python2-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-17.module_el8+2579+f2359962.tuxcare.els16"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-17.module_el8+2579+f2359962.tuxcare.els16"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-6+deb12u9"}]}],"versions":["3.11.2-6","3.11.2-6+deb12u1","3.11.2-6+deb12u2","3.11.2-6+deb12u3","3.11.2-6+deb12u4","3.11.2-6+deb12u5","3.11.2-6+deb12u6","3.11.2-6+deb12u7","3.11.2-6+deb12u8"]},{"source":"osv","ecosystem":"Debian:13","package":"python3.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.5-2+deb13u3"}]}],"versions":["3.13.5-2","3.13.5-2+deb13u1","3.13.5-2+deb13u2"]},{"source":"osv","ecosystem":"Debian:14","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.6-1"}]}],"versions":["3.14.0-1","3.14.0-2","3.14.0-3","3.14.0-4","3.14.0-5","3.14.0~a7-1","3.14.0~b1-1","3.14.0~b2-1","3.14.0~b3-1","3.14.0~b4-1","3.14.0~rc1-1","3.14.0~rc2-1","3.14.0~rc3-1","3.14.2-1","3.14.3-1","3.14.3-2","3.14.3-3","3.14.3-4","3.14.3-5","3.14.4-1","3.14.4-2","3.14.5-1","3.14.5~rc1-1"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.6-31.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.6-31.oe2403sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python-unversioned-command","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.7-1.2.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.7-1.2.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.7-1.2.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.7-1.2.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.7-1.2.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.7-1.2.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.7-1.2.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.7-1.2.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.7-1.2.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.7-1.2.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.7-1.2.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.7-1.2.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.7-1.2.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.7-1.2.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.7-1.2.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.14-freethreading-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.7-1.2.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.21-1.3.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.10-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.21-1.3.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.10-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.21-1.3.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.10-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.21-1.3.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.10-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.21-1.3.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.10-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.21-1.3.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.10-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.21-1.3.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.16-1.4.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.16-1.4.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.16-1.4.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.16-1.4.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.16-1.4.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.16-1.4.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.11-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.16-1.4.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.14-1.3.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.14-1.3.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.14-1.3.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.14-1.3.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.14-1.3.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.14-1.3.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.12-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.14-1.3.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.15-1.3.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.15-1.3.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.15-1.3.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-freethreading","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.15-1.3.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-freethreading-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.15-1.3.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-idle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.15-1.3.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.15-1.3.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.15-1.3.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3.13-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.15-1.3.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Root:Alpine:3.20","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-r00073"},{"fixed":"3.12.13-r00074"},{"fixed":"3.12.13-r00075"},{"fixed":"3.12.13-r00076"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.20","package":"rootio-python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.13-r00073"},{"fixed":"3.12.13-r00074"},{"fixed":"3.12.13-r00075"},{"fixed":"3.12.13-r00076"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"python3.9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-1+deb11u7.aikido.18"},{"fixed":"3.9.2-1+deb11u7.aikido.19"},{"fixed":"3.9.2-1+deb11u7.aikido.20"},{"fixed":"3.9.2-1+deb11u7.aikido.17"},{"fixed":"3.9.2-1+deb11u7.root.io.16"},{"fixed":"3.9.2-1+deb11u7.aikido.21"},{"fixed":"3.9.2-1+deb11u7.aikido.22"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"python3-defaults","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-3.aikido.1"},{"fixed":"3.9.2-3.aikido.2"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-python3.9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-1+deb11u7.aikido.18"},{"fixed":"3.9.2-1+deb11u7.aikido.19"},{"fixed":"3.9.2-1+deb11u7.aikido.20"},{"fixed":"3.9.2-1+deb11u7.aikido.17"},{"fixed":"3.9.2-1+deb11u7.root.io.16"},{"fixed":"3.9.2-1+deb11u7.aikido.21"},{"fixed":"3.9.2-1+deb11u7.aikido.22"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-python3-defaults","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-3.aikido.1"},{"fixed":"3.9.2-3.aikido.2"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-6+deb12u8.aikido.36"},{"fixed":"3.11.2-6+deb12u8.aikido.37"},{"fixed":"3.11.2-6+deb12u8.aikido.38"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"python3-defaults","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-1.aikido.1"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-6+deb12u8.aikido.36"},{"fixed":"3.11.2-6+deb12u8.aikido.37"},{"fixed":"3.11.2-6+deb12u8.aikido.38"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-python3-defaults","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.2-1.aikido.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-slfo.1.1_1.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-slfo.1.1_1.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python311-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-150400.9.102.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.15-150700.4.56.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python313-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.15-150700.4.56.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.133.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-150000.133.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-150600.3.68.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python312-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-150600.3.68.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-150600.3.68.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python312-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-150600.3.68.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.88.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.88.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-33.88.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python36","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-125.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python36-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-125.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python36","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-125.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python36-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-125.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-25.199.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-25.199.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-25.199.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-25.199.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python3-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-150300.10.129.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-150600.3.74.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-150600.3.74.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-150600.3.74.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-150600.3.74.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-150600.3.74.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-150600.3.74.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python311-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.17-150600.3.74.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.5-8ubuntu3","2.7.5-8ubuntu4","2.7.6-2","2.7.6-2ubuntu1","2.7.6-3","2.7.6-3ubuntu1","2.7.6-4","2.7.6-4ubuntu1","2.7.6-5","2.7.6-7","2.7.6-8","2.7.6-8ubuntu0.2","2.7.6-8ubuntu0.3","2.7.6-8ubuntu0.4","2.7.6-8ubuntu0.5","2.7.6-8ubuntu0.6+esm2","2.7.6-8ubuntu0.6+esm3","2.7.6-8ubuntu0.6+esm5","2.7.6-8ubuntu0.6+esm6","2.7.6-8ubuntu0.6+esm7","2.7.6-8ubuntu0.6+esm8","2.7.6-8ubuntu0.6+esm9","2.7.6-8ubuntu0.6+esm10","2.7.6-8ubuntu0.6+esm11","2.7.6-8ubuntu0.6+esm12","2.7.6-8ubuntu0.6+esm13","2.7.6-8ubuntu0.6+esm14","2.7.6-8ubuntu0.6+esm15","2.7.6-8ubuntu0.6+esm16","2.7.6-8ubuntu0.6+esm17","2.7.6-8ubuntu0.6+esm18","2.7.6-8ubuntu0.6+esm20","2.7.6-8ubuntu0.6+esm21","2.7.6-8ubuntu0.6+esm22","2.7.6-8ubuntu0.6+esm24","2.7.6-8ubuntu0.6+esm25","2.7.6-8ubuntu0.6+esm26","2.7.6-8ubuntu0.6+esm28","2.7.6-8ubuntu0.6+esm29","2.7.6-8ubuntu0.6+esm30"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python3.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.4~b1-0ubuntu3","3.4~b1-4ubuntu4","3.4~b1-4ubuntu6","3.4~b1-5ubuntu2","3.4~b2-1","3.4~b3-1ubuntu1","3.4~rc1-1build1","3.4~rc2-1","3.4~rc3-0ubuntu1","3.4.0-1","3.4.0-2ubuntu1","3.4.0-2ubuntu1.1","3.4.3-1ubuntu1~14.04.1","3.4.3-1ubuntu1~14.04.3","3.4.3-1ubuntu1~14.04.4","3.4.3-1ubuntu1~14.04.5","3.4.3-1ubuntu1~14.04.6","3.4.3-1ubuntu1~14.04.7","3.4.3-1ubuntu1~14.04.7+esm2","3.4.3-1ubuntu1~14.04.7+esm4","3.4.3-1ubuntu1~14.04.7+esm6","3.4.3-1ubuntu1~14.04.7+esm7","3.4.3-1ubuntu1~14.04.7+esm8","3.4.3-1ubuntu1~14.04.7+esm10","3.4.3-1ubuntu1~14.04.7+esm11","3.4.3-1ubuntu1~14.04.7+esm12","3.4.3-1ubuntu1~14.04.7+esm13","3.4.3-1ubuntu1~14.04.7+esm14","3.4.3-1ubuntu1~14.04.7+esm15","3.4.3-1ubuntu1~14.04.7+esm16","3.4.3-1ubuntu1~14.04.7+esm17","3.4.3-1ubuntu1~14.04.7+esm19","3.4.3-1ubuntu1~14.04.7+esm20","3.4.3-1ubuntu1~14.04.7+esm21"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.5.2-2ubuntu0~16.04.4~14.04.1","3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","3.5.2-2ubuntu0~16.04.4~14.04.1+esm3","3.5.2-2ubuntu0~16.04.4~14.04.1+esm4","3.5.2-2ubuntu0~16.04.4~14.04.1+esm5","3.5.2-2ubuntu0~16.04.4~14.04.1+esm6","3.5.2-2ubuntu0~16.04.4~14.04.1+esm7","3.5.2-2ubuntu0~16.04.4~14.04.1+esm8","3.5.2-2ubuntu0~16.04.4~14.04.1+esm9","3.5.2-2ubuntu0~16.04.4~14.04.1+esm10","3.5.2-2ubuntu0~16.04.4~14.04.1+esm11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.10-4ubuntu1","2.7.10-4ubuntu2","2.7.11-2","2.7.11-3","2.7.11-4","2.7.11-6","2.7.11-7","2.7.11-7ubuntu1","2.7.12-1~16.04","2.7.12-1ubuntu0~16.04.1","2.7.12-1ubuntu0~16.04.2","2.7.12-1ubuntu0~16.04.3","2.7.12-1ubuntu0~16.04.4","2.7.12-1ubuntu0~16.04.8","2.7.12-1ubuntu0~16.04.9","2.7.12-1ubuntu0~16.04.11","2.7.12-1ubuntu0~16.04.12","2.7.12-1ubuntu0~16.04.13","2.7.12-1ubuntu0~16.04.14","2.7.12-1ubuntu0~16.04.16","2.7.12-1ubuntu0~16.04.18","2.7.12-1ubuntu0~16.04.18+esm1","2.7.12-1ubuntu0~16.04.18+esm2","2.7.12-1ubuntu0~16.04.18+esm3","2.7.12-1ubuntu0~16.04.18+esm4","2.7.12-1ubuntu0~16.04.18+esm5","2.7.12-1ubuntu0~16.04.18+esm6","2.7.12-1ubuntu0~16.04.18+esm7","2.7.12-1ubuntu0~16.04.18+esm8","2.7.12-1ubuntu0~16.04.18+esm9","2.7.12-1ubuntu0~16.04.18+esm10","2.7.12-1ubuntu0~16.04.18+esm11","2.7.12-1ubuntu0~16.04.18+esm12","2.7.12-1ubuntu0~16.04.18+esm13","2.7.12-1ubuntu0~16.04.18+esm15","2.7.12-1ubuntu0~16.04.18+esm16","2.7.12-1ubuntu0~16.04.18+esm17","2.7.12-1ubuntu0~16.04.18+esm18","2.7.12-1ubuntu0~16.04.18+esm19","2.7.12-1ubuntu0~16.04.18+esm20","2.7.12-1ubuntu0~16.04.18+esm21","2.7.12-1ubuntu0~16.04.18+esm22"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.5.0-3","3.5.0-3ubuntu1","3.5.1~rc1-2ubuntu1","3.5.1-1","3.5.1-2","3.5.1-3","3.5.1-5","3.5.1-6ubuntu1","3.5.1-6ubuntu2","3.5.1-9ubuntu1","3.5.1-10","3.5.2-2~16.01","3.5.2-2~16.04","3.5.2-2ubuntu0~16.04.1","3.5.2-2ubuntu0~16.04.2","3.5.2-2ubuntu0~16.04.3","3.5.2-2ubuntu0~16.04.4","3.5.2-2ubuntu0~16.04.5","3.5.2-2ubuntu0~16.04.8","3.5.2-2ubuntu0~16.04.9","3.5.2-2ubuntu0~16.04.10","3.5.2-2ubuntu0~16.04.11","3.5.2-2ubuntu0~16.04.12","3.5.2-2ubuntu0~16.04.13","3.5.2-2ubuntu0~16.04.13+esm1","3.5.2-2ubuntu0~16.04.13+esm2","3.5.2-2ubuntu0~16.04.13+esm3","3.5.2-2ubuntu0~16.04.13+esm5","3.5.2-2ubuntu0~16.04.13+esm6","3.5.2-2ubuntu0~16.04.13+esm7","3.5.2-2ubuntu0~16.04.13+esm8","3.5.2-2ubuntu0~16.04.13+esm9","3.5.2-2ubuntu0~16.04.13+esm10","3.5.2-2ubuntu0~16.04.13+esm11","3.5.2-2ubuntu0~16.04.13+esm12","3.5.2-2ubuntu0~16.04.13+esm13","3.5.2-2ubuntu0~16.04.13+esm14","3.5.2-2ubuntu0~16.04.13+esm15","3.5.2-2ubuntu0~16.04.13+esm16","3.5.2-2ubuntu0~16.04.13+esm17","3.5.2-2ubuntu0~16.04.13+esm18","3.5.2-2ubuntu0~16.04.13+esm19","3.5.2-2ubuntu0~16.04.13+esm20","3.5.2-2ubuntu0~16.04.13+esm21","3.5.2-2ubuntu0~16.04.13+esm22","3.5.2-2ubuntu0~16.04.13+esm23","3.5.2-2ubuntu0~16.04.13+esm24","3.5.2-2ubuntu0~16.04.13+esm25"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.14-2ubuntu2","2.7.14-4","2.7.14-6","2.7.14-7","2.7.14-8","2.7.15~rc1-1","2.7.15~rc1-1ubuntu0.1","2.7.15-4ubuntu4~18.04","2.7.15-4ubuntu4~18.04.1","2.7.15-4ubuntu4~18.04.2","2.7.17-1~18.04","2.7.17-1~18.04ubuntu1","2.7.17-1~18.04ubuntu1.1","2.7.17-1~18.04ubuntu1.2","2.7.17-1~18.04ubuntu1.3","2.7.17-1~18.04ubuntu1.5","2.7.17-1~18.04ubuntu1.6","2.7.17-1~18.04ubuntu1.7","2.7.17-1~18.04ubuntu1.8","2.7.17-1~18.04ubuntu1.10","2.7.17-1~18.04ubuntu1.11","2.7.17-1~18.04ubuntu1.13","2.7.17-1~18.04ubuntu1.13+esm1","2.7.17-1~18.04ubuntu1.13+esm2","2.7.17-1~18.04ubuntu1.13+esm3","2.7.17-1~18.04ubuntu1.13+esm4","2.7.17-1~18.04ubuntu1.13+esm5","2.7.17-1~18.04ubuntu1.13+esm6","2.7.17-1~18.04ubuntu1.13+esm7","2.7.17-1~18.04ubuntu1.13+esm8","2.7.17-1~18.04ubuntu1.13+esm10","2.7.17-1~18.04ubuntu1.13+esm11","2.7.17-1~18.04ubuntu1.13+esm12","2.7.17-1~18.04ubuntu1.13+esm13","2.7.17-1~18.04ubuntu1.13+esm14","2.7.17-1~18.04ubuntu1.13+esm15"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.3-1ubuntu1","3.6.4~rc1-1","3.6.4~rc1-2","3.6.4-1","3.6.4-2","3.6.4-3build1","3.6.4-4","3.6.5~rc1-1","3.6.5-3","3.6.6-1~18.04","3.6.7-1~18.04","3.6.8-1~18.04.1","3.6.8-1~18.04.2","3.6.8-1~18.04.3","3.6.9-1~18.04","3.6.9-1~18.04ubuntu1","3.6.9-1~18.04ubuntu1.1","3.6.9-1~18.04ubuntu1.3","3.6.9-1~18.04ubuntu1.4","3.6.9-1~18.04ubuntu1.6","3.6.9-1~18.04ubuntu1.7","3.6.9-1~18.04ubuntu1.8","3.6.9-1~18.04ubuntu1.9","3.6.9-1~18.04ubuntu1.10","3.6.9-1~18.04ubuntu1.12","3.6.9-1~18.04ubuntu1.13","3.6.9-1~18.04ubuntu1.13+esm1","3.6.9-1~18.04ubuntu1.13+esm2","3.6.9-1~18.04ubuntu1.13+esm3","3.6.9-1~18.04ubuntu1.13+esm4","3.6.9-1~18.04ubuntu1.13+esm5","3.6.9-1~18.04ubuntu1.13+esm6","3.6.9-1~18.04ubuntu1.13+esm7","3.6.9-1~18.04ubuntu1.13+esm8","3.6.9-1~18.04ubuntu1.13+esm9","3.6.9-1~18.04ubuntu1.13+esm10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.7.0~a2-1","3.7.0~a3-1","3.7.0~a3-2","3.7.0~a3-3","3.7.0~a4-1","3.7.0~b1-1","3.7.0~b1-1build1","3.7.0~b2-1","3.7.0~b3-1","3.7.0-1~18.04","3.7.1-1~18.04","3.7.3-2~18.04.1","3.7.5-2~18.04","3.7.5-2~18.04.4","3.7.5-2ubuntu1~18.04.2","3.7.5-2ubuntu1~18.04.2+esm1","3.7.5-2ubuntu1~18.04.2+esm2","3.7.5-2ubuntu1~18.04.2+esm3","3.7.5-2ubuntu1~18.04.2+esm4","3.7.5-2ubuntu1~18.04.2+esm5","3.7.5-2ubuntu1~18.04.2+esm6","3.7.5-2ubuntu1~18.04.2+esm7","3.7.5-2ubuntu1~18.04.2+esm8","3.7.5-2ubuntu1~18.04.2+esm9","3.7.5-2ubuntu1~18.04.2+esm10","3.7.5-2ubuntu1~18.04.2+esm11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python3.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.8.0-3~18.04","3.8.0-3~18.04.1","3.8.0-3ubuntu1~18.04.2","3.8.0-3ubuntu1~18.04.2+esm1","3.8.0-3ubuntu1~18.04.2+esm2","3.8.0-3ubuntu1~18.04.2+esm3","3.8.0-3ubuntu1~18.04.2+esm4","3.8.0-3ubuntu1~18.04.2+esm5","3.8.0-3ubuntu1~18.04.2+esm6","3.8.0-3ubuntu1~18.04.2+esm7","3.8.0-3ubuntu1~18.04.2+esm8","3.8.0-3ubuntu1~18.04.2+esm9","3.8.0-3ubuntu1~18.04.2+esm10","3.8.0-3ubuntu1~18.04.2+esm11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python3.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.8.0-1","3.8.0-2","3.8.0-3","3.8.0-4","3.8.0-5","3.8.1-2ubuntu3","3.8.2~rc1-1ubuntu1","3.8.2-1","3.8.2-1ubuntu1","3.8.2-1ubuntu1.1","3.8.2-1ubuntu1.2","3.8.5-1~20.04","3.8.5-1~20.04.2","3.8.5-1~20.04.3","3.8.10-0ubuntu1~20.04","3.8.10-0ubuntu1~20.04.1","3.8.10-0ubuntu1~20.04.2","3.8.10-0ubuntu1~20.04.4","3.8.10-0ubuntu1~20.04.5","3.8.10-0ubuntu1~20.04.6","3.8.10-0ubuntu1~20.04.7","3.8.10-0ubuntu1~20.04.8","3.8.10-0ubuntu1~20.04.9","3.8.10-0ubuntu1~20.04.10","3.8.10-0ubuntu1~20.04.11","3.8.10-0ubuntu1~20.04.12","3.8.10-0ubuntu1~20.04.13","3.8.10-0ubuntu1~20.04.14","3.8.10-0ubuntu1~20.04.15","3.8.10-0ubuntu1~20.04.16","3.8.10-0ubuntu1~20.04.17","3.8.10-0ubuntu1~20.04.18","3.8.10-0ubuntu1~20.04.18+esm1","3.8.10-0ubuntu1~20.04.18+esm2","3.8.10-0ubuntu1~20.04.18+esm3","3.8.10-0ubuntu1~20.04.18+esm4","3.8.10-0ubuntu1~20.04.18+esm5","3.8.10-0ubuntu1~20.04.18+esm6","3.8.10-0ubuntu1~20.04.18+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.17~rc1-1","2.7.17-1","2.7.17-1ubuntu5","2.7.17-1ubuntu6","2.7.18~rc1-2","2.7.18-1~20.04","2.7.18-1~20.04.1","2.7.18-1~20.04.1+esm1","2.7.18-1~20.04.3","2.7.18-1~20.04.3+esm1","2.7.18-1~20.04.4","2.7.18-1~20.04.4+esm1","2.7.18-1~20.04.4+esm2","2.7.18-1~20.04.4+esm3","2.7.18-1~20.04.5","2.7.18-1~20.04.5+esm1","2.7.18-1~20.04.5+esm2","2.7.18-1~20.04.6","2.7.18-1~20.04.6+esm1","2.7.18-1~20.04.7","2.7.18-1~20.04.7+esm3","2.7.18-1~20.04.7+esm4","2.7.18-1~20.04.7+esm6","2.7.18-1~20.04.7+esm7","2.7.18-1~20.04.7+esm8","2.7.18-1~20.04.7+esm9","2.7.18-1~20.04.7+esm10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python3.9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.9.0~rc1-1~20.04","3.9.0-5~20.04","3.9.5-3~20.04.1","3.9.5-3ubuntu0~20.04.1","3.9.5-3ubuntu0~20.04.1+esm1","3.9.5-3ubuntu0~20.04.1+esm2","3.9.5-3ubuntu0~20.04.1+esm3","3.9.5-3ubuntu0~20.04.1+esm4","3.9.5-3ubuntu0~20.04.1+esm5","3.9.5-3ubuntu0~20.04.1+esm6","3.9.5-3ubuntu0~20.04.1+esm7","3.9.5-3ubuntu0~20.04.1+esm8","3.9.5-3ubuntu0~20.04.1+esm9","3.9.5-3ubuntu0~20.04.1+esm10","3.9.5-3ubuntu0~20.04.1+esm11"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"python3.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.12-1~22.04.16"}]}],"versions":["3.10.0-2","3.10.0-3","3.10.0-4","3.10.0-5","3.10.0-5build1","3.10.1-1","3.10.1-2","3.10.2-1","3.10.2-5","3.10.2-7","3.10.3-1","3.10.4-3","3.10.4-3ubuntu0.1","3.10.6-1~22.04","3.10.6-1~22.04.1","3.10.6-1~22.04.2","3.10.6-1~22.04.2ubuntu1","3.10.6-1~22.04.2ubuntu1.1","3.10.12-1~22.04.2","3.10.12-1~22.04.3","3.10.12-1~22.04.4","3.10.12-1~22.04.5","3.10.12-1~22.04.6","3.10.12-1~22.04.7","3.10.12-1~22.04.8","3.10.12-1~22.04.9","3.10.12-1~22.04.10","3.10.12-1~22.04.11","3.10.12-1~22.04.12","3.10.12-1~22.04.13","3.10.12-1~22.04.14","3.10.12-1~22.04.15"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.18-8build1","2.7.18-13","2.7.18-13ubuntu1","2.7.18-13ubuntu1.1","2.7.18-13ubuntu1.1+esm2","2.7.18-13ubuntu1.2","2.7.18-13ubuntu1.2+esm1","2.7.18-13ubuntu1.2+esm2","2.7.18-13ubuntu1.2+esm3","2.7.18-13ubuntu1.3","2.7.18-13ubuntu1.3+esm1","2.7.18-13ubuntu1.4","2.7.18-13ubuntu1.4+esm1","2.7.18-13ubuntu1.5","2.7.18-13ubuntu1.5+esm2","2.7.18-13ubuntu1.5+esm3","2.7.18-13ubuntu1.5+esm5","2.7.18-13ubuntu1.5+esm6","2.7.18-13ubuntu1.5+esm7","2.7.18-13ubuntu1.5+esm8","2.7.18-13ubuntu1.5+esm9"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python3.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.11.0~rc1-1~22.04","3.11.0~rc1-1~22.04.1~esm1","3.11.0~rc1-1~22.04.1~esm2","3.11.0~rc1-1~22.04.1~esm3","3.11.0~rc1-1~22.04.1~esm4","3.11.0~rc1-1~22.04.1~esm5","3.11.0~rc1-1~22.04.1~esm6","3.11.0~rc1-1~22.04.1~esm7","3.11.0~rc1-1~22.04.1~esm8","3.11.0~rc1-1~22.04.1~esm9","3.11.0~rc1-1~22.04.1","3.11.0~rc1-1~22.04.1+esm1","3.11.0~rc1-1~22.04.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.3-1ubuntu0.15"}]}],"versions":["3.12.0-1","3.12.0-5","3.12.0-6","3.12.0-7","3.12.1-2","3.12.2-1","3.12.2-4build3","3.12.2-4build4","3.12.2-5ubuntu3","3.12.3-1","3.12.3-1ubuntu0.1","3.12.3-1ubuntu0.2","3.12.3-1ubuntu0.3","3.12.3-1ubuntu0.4","3.12.3-1ubuntu0.5","3.12.3-1ubuntu0.6","3.12.3-1ubuntu0.7","3.12.3-1ubuntu0.8","3.12.3-1ubuntu0.9","3.12.3-1ubuntu0.10","3.12.3-1ubuntu0.11","3.12.3-1ubuntu0.12","3.12.3-1ubuntu0.13"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"python3.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.13.3-1","3.13.3-2","3.13.3-4","3.13.4-1","3.13.5-1","3.13.5-2","3.13.6-1","3.13.7-1","3.13.7-1ubuntu0.1","3.13.7-1ubuntu0.2","3.13.7-1ubuntu0.3","3.13.7-1ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.14.0~a7-0ubuntu1","3.14.0~b1-1","3.14.0~b3-1","3.14.0~rc1-1","3.14.0~rc2-1","3.14.0~rc3-1","3.14.0-1","3.14.0-1ubuntu0.1","3.14.0-1ubuntu0.2","3.14.0-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-1ubuntu0.1"}]}],"versions":["3.14.0-1","3.14.0-2","3.14.0-4","3.14.2-1","3.14.3-1","3.14.3-2","3.14.3-3","3.14.3-5","3.14.4-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"python3.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.12-1~22.04.16"}]}],"versions":["3.10.0-2","3.10.0-3","3.10.0-4","3.10.0-5","3.10.0-5build1","3.10.1-1","3.10.1-2","3.10.2-1","3.10.2-5","3.10.2-7","3.10.3-1","3.10.4-3","3.10.4-3ubuntu0.1","3.10.6-1~22.04","3.10.6-1~22.04.1","3.10.6-1~22.04.2","3.10.6-1~22.04.2ubuntu1","3.10.6-1~22.04.2ubuntu1.1","3.10.12-1~22.04.2","3.10.12-1~22.04.3","3.10.12-1~22.04.4","3.10.12-1~22.04.5","3.10.12-1~22.04.6","3.10.12-1~22.04.7","3.10.12-1~22.04.8","3.10.12-1~22.04.9","3.10.12-1~22.04.10","3.10.12-1~22.04.11","3.10.12-1~22.04.12","3.10.12-1~22.04.13","3.10.12-1~22.04.14","3.10.12-1~22.04.15"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"python3.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.3-1ubuntu0.15"}]}],"versions":["3.12.0-1","3.12.0-5","3.12.0-6","3.12.0-7","3.12.1-2","3.12.2-1","3.12.2-4build3","3.12.2-4build4","3.12.2-5ubuntu3","3.12.3-1","3.12.3-1ubuntu0.1","3.12.3-1ubuntu0.2","3.12.3-1ubuntu0.3","3.12.3-1ubuntu0.4","3.12.3-1ubuntu0.5","3.12.3-1ubuntu0.6","3.12.3-1ubuntu0.7","3.12.3-1ubuntu0.8","3.12.3-1ubuntu0.9","3.12.3-1ubuntu0.10","3.12.3-1ubuntu0.11","3.12.3-1ubuntu0.12","3.12.3-1ubuntu0.13"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"python3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.4-1ubuntu0.1"}]}],"versions":["3.14.0-1","3.14.0-2","3.14.0-4","3.14.2-1","3.14.3-1","3.14.3-2","3.14.3-3","3.14.3-5","3.14.4-1"],"bundled":18},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python314","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.6-1.1"}]}],"bundled":12},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.21-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python315","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.0~rc2-1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python311","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.16-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python312","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.14-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python313","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.15-1.1"}]}],"bundled":5}],"products":[{"vendor":"python software foundation","product":"cpython"}],"references":[{"url":"https://github.com/python/cpython/pull/150600","tags":["patch","web","fix","article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/DBJZETMGUIFK7DVUWMOXHD3Z6IX2QPSX/","tags":["vendor-advisory","web","advisory","article","report"]},{"url":"https://github.com/python/cpython/issues/150599","tags":["issue-tracking","web","report","article"]},{"url":"https://github.com/python/cpython/commit/157a5df8cb5d82b33f918a7489e72ce95ceb12b6","tags":["patch","web","fix"]},{"url":"https://github.com/python/cpython/commit/5755d0f083949ff3c5bf3a37e673e24e306b036e","tags":["patch","web","fix"]},{"url":"https://github.com/python/cpython/commit/619a12b2e545391dc436b3af79dda22337382a6f","tags":["patch","web","fix"]},{"url":"https://github.com/python/cpython/commit/d3ca26983dfbccdf609f24ff5877dc3118e4702d","tags":["patch","web","fix"]},{"url":"https://github.com/python/cpython/commit/938ec030e90c5e53f1faac6fab1643f14e4f4a79","tags":["patch","web","fix"]},{"url":"https://github.com/python/cpython/commit/991e6cf86496718c4ef00b362d640e00cb5c85b2","tags":["patch","web","fix"]},{"url":"https://github.com/python/cpython/commit/1ba6135eae75ad8413413caeeedb56ae72320636","tags":["patch","web","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2026/06/08/17","tags":["web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-9669","tags":["web","advisory"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/DBJZETMGUIFK7DVUWMOXHD3Z6IX2QPSX"},{"url":"https://github.com/advisories/GHSA-8jvr-397x-xqh9"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-9669","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-9669","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1789461197.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1789575335.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1789578322.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1789578714.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1789636275.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11972","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1789636518.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1789641197.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1789661605.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15366","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15367","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1789662564.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1789735614.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15310","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-17084","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87910","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1789741774.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1789747235.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1789748541.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1789900651.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1789992787.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1789993180.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1789993238.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1789995979.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1790007232.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1790072312.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1790075259.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/9xxx/CVE-2026-9669.json","tags":["advisory"]},{"url":"https://github.com/python/cpython","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-9669","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2694","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7774","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2695","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:67572","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-87910","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-12003","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-9669","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3276","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-7210","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-8328","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67572.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2484424","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3276","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3276","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/149079","tags":["article"]},{"url":"https://github.com/python/cpython/pull/149080","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/PP5HB4K7727OBBM76KA2ILID76K3OZGZ/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2469216","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-7210","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7210","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/149018","tags":["article"]},{"url":"https://github.com/python/cpython/pull/149023","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477300","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-8328","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8328","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/87451","tags":["article"]},{"url":"https://github.com/python/cpython/pull/149648","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/ITF2BAPBQEPYK3LDMPRSY435JGNHYNDP/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2486590","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-9669","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2489322","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-12003","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12003","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/151544","tags":["article"]},{"url":"https://github.com/python/cpython/pull/151545","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2531985","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-87910","tags":["advisory"]},{"url":"https://github.com/python/cpython/issues/157265","tags":["article"]},{"url":"https://github.com/python/cpython/pull/157266","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68132","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-82049","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68132.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533296","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-82049","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82049","tags":["advisory"]},{"url":"https://github.com/python/cpython/commit/5a57248b22ad3b9aafcaaadae2c304a1923daeca","tags":["article"]},{"url":"https://github.com/python/cpython/issues/157190","tags":["article"]},{"url":"https://github.com/python/cpython/pull/157191","tags":["article"]},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/EFJWGAZJA56AKSBR2WHMHQZO7RRLZPRH/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68135","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68135.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68154","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68154.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68309","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68309.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623743-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259240","tags":["report"]},{"url":"https://bugzilla.suse.com/1259611","tags":["report"]},{"url":"https://bugzilla.suse.com/1259734","tags":["report"]},{"url":"https://bugzilla.suse.com/1259735","tags":["report"]},{"url":"https://bugzilla.suse.com/1260026","tags":["report"]},{"url":"https://bugzilla.suse.com/1261969","tags":["report"]},{"url":"https://bugzilla.suse.com/1262098","tags":["report"]},{"url":"https://bugzilla.suse.com/1262319","tags":["report"]},{"url":"https://bugzilla.suse.com/1264962","tags":["report"]},{"url":"https://bugzilla.suse.com/1265268","tags":["report"]},{"url":"https://bugzilla.suse.com/1267581","tags":["report"]},{"url":"https://bugzilla.suse.com/1267821","tags":["report"]},{"url":"https://bugzilla.suse.com/1267974","tags":["report"]},{"url":"https://bugzilla.suse.com/1268977","tags":["report"]},{"url":"https://bugzilla.suse.com/1269066","tags":["report"]},{"url":"https://bugzilla.suse.com/1269788","tags":["report"]},{"url":"https://bugzilla.suse.com/1269959","tags":["report"]},{"url":"https://bugzilla.suse.com/1271192","tags":["report"]},{"url":"https://bugzilla.suse.com/1276223","tags":["report"]},{"url":"https://bugzilla.suse.com/1276226","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9669","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623845-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264396-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1276227","tags":["report"]},{"url":"https://bugzilla.suse.com/1277111","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19672","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264401-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1258364","tags":["report"]},{"url":"https://bugzilla.suse.com/1273099","tags":["report"]},{"url":"https://bugzilla.suse.com/1273148","tags":["report"]},{"url":"https://bugzilla.suse.com/1274683","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-18503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6879","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264411-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1276903","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264534-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264633-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264743-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259989","tags":["report"]},{"url":"https://bugzilla.suse.com/1261970","tags":["report"]},{"url":"https://bugzilla.suse.com/1262429","tags":["report"]},{"url":"https://bugzilla.suse.com/1273091","tags":["report"]},{"url":"https://bugzilla.suse.com/1274743","tags":["report"]},{"url":"https://bugzilla.suse.com/1277271","tags":["report"]},{"url":"https://bugzilla.suse.com/1280459","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-82049","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264744-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4435","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264754-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1257599","tags":["report"]},{"url":"https://bugzilla.suse.com/1262467","tags":["report"]},{"url":"https://bugzilla.suse.com/1263083","tags":["report"]},{"url":"https://bugzilla.suse.com/1263443","tags":["report"]},{"url":"https://bugzilla.suse.com/1266669","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8643","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264946-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1283826","tags":["report"]},{"url":"https://bugzilla.suse.com/1283969","tags":["report"]},{"url":"https://bugzilla.suse.com/1285433","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19553","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-9669","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8509-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-4189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-13462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-69534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-0672","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-1299","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-1502","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-2297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-3276","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-3644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-4224","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-4519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-4786","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-5713","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-6019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-6100","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-7774","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-8328","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5713","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-9669","title":"bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow","description":"bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.","status":"published","published":"2026-06-08T22:01:15.42Z","modified":"2026-08-13T00:26:48.913Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T13:42:37.965383Z"}],"euvd":[{"id":"EUVD-2026-35202","description":"bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.","status":"published","published":"2026-06-08T22:01:15Z","modified":"2026-08-13T00:26:48Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T18:01:57.213133Z"}],"ghsa":[{"id":"GHSA-8jvr-397x-xqh9","title":"bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught...","description":"bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.","status":"published","published":"2026-06-09T00:33:23Z","modified":"2026-08-11T03:32:55Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T15:10:16.495213Z"}],"nvd":[{"id":"CVE-2026-9669","description":"bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.","status":"published","published":"2026-06-08T23:17:25.17Z","modified":"2026-08-13T01:16:56.087Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:12:22.73178Z"}],"osv":[{"id":"ALPINE-CVE-2026-9669","description":"bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.","status":"published","published":"2026-06-08T23:17:25.17Z","modified":"2026-10-01T02:17:49.422457163Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CVE-2026-9669","title":"bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow","description":"bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.","status":"published","published":"2026-06-08T22:01:15.42Z","modified":"2026-11-04T07:14:02.141582567Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-121"],"updated_at":"2026-11-04T07:32:23.735279Z"},{"id":"DEBIAN-CVE-2026-9669","description":"bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.","status":"published","published":"2026-06-08T23:17:25.17Z","modified":"2026-11-01T17:00:12.543667728Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:46:07.324252Z"},{"id":"OESA-2026-2694","title":"python3 security update","description":"Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.\r\n\r\nSecurity Fix(es):\n\ntarfile.data_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() to write files outside the destination directory, subject to the permissions of the extracting process.(CVE-2026-7774)\n\nbz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.(CVE-2026-9669)","status":"published","published":"2026-06-24T11:11:37Z","modified":"2026-08-18T01:20:05.885286119Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"OESA-2026-2695","title":"python3 security update","description":"Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces.\r\n\r\nSecurity Fix(es):\n\ntarfile.data_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() to write files outside the destination directory, subject to the permissions of the extracting process.(CVE-2026-7774)\n\nbz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.(CVE-2026-9669)","status":"published","published":"2026-06-24T11:11:37Z","modified":"2026-08-18T01:20:05.738362979Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"RHSA-2026:67572","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-09-22T10:18:44Z","modified":"2026-10-17T10:18:20Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:68132","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-09-22T10:19:02Z","modified":"2026-10-17T10:18:27Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:68135","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-09-22T10:19:03Z","modified":"2026-10-17T10:18:28Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:68154","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-09-22T10:19:04Z","modified":"2026-10-17T10:18:28Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:68309","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-09-22T10:19:11Z","modified":"2026-10-17T10:18:31Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"UBUNTU-CVE-2026-9669","description":"bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.","status":"published","published":"2026-06-08T23:17:00Z","modified":"2026-09-08T19:45:25.721796822Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T16:57:44.071534Z"},{"id":"AZL-90159","title":"CVE-2026-9669 affecting package python3 for versions less than 3.12.9-14","description":"bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.","status":"published","published":"2026-06-08T23:17:25Z","modified":"2026-09-08T17:33:11Z","updated_at":"2026-11-02T15:28:11.397546Z"},{"id":"BELL-CVE-2026-9669","status":"published","published":"2026-06-11T06:12:00.350618Z","modified":"2026-06-17T07:15:12.736540793Z","updated_at":"2026-11-02T15:28:27.468539Z"},{"id":"BIT-libpython-2026-9669","title":"bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow","description":"bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.","status":"published","published":"2026-06-25T07:36:35.402Z","modified":"2026-08-19T09:45:18.025185657Z","updated_at":"2026-11-02T15:28:32.162822Z"},{"id":"BIT-python-2026-9669","title":"bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow","description":"bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.","status":"published","published":"2026-06-25T07:40:50.677Z","modified":"2026-08-19T09:45:25.926151279Z","updated_at":"2026-11-02T15:28:34.724063Z"},{"id":"BIT-python-min-2026-9669","title":"bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow","description":"bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.","status":"published","published":"2026-06-25T07:40:52.349Z","modified":"2026-08-19T09:45:21.830577072Z","updated_at":"2026-11-02T15:28:35.111822Z"},{"id":"CLSA-2026-1789461197","title":"Fix CVE(s): CVE-2026-9669","description":"   * SECURITY UPDATE: out-of-bounds stack write when a bz2 decompressor or\n     BZ2File handle is reused after a decompression error\n     - debian/patches/CVE-2026-9669.patch: record the bzlib error code on\n       BZ2DecompObject and refuse further decompress() calls with\n       ValueError in Modules/bz2module.c, so that crafted input can no\n       longer make BZ2_bzDecompress() resume from an invalid internal\n       state; also make the error sticky for the C BZ2File read paths,\n       which re-entered the errored stream in the same way, and add\n       regression tests for both\n     - CVE-2026-9669","status":"published","published":"2026-09-15T08:33:28Z","modified":"2026-10-26T09:31:53.682147018Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"CLSA-2026-1789575335","title":"Fix CVE(s): CVE-2026-9669","description":"   * SECURITY UPDATE: out-of-bounds write on bz2 decompressor and BZ2File reuse\n     after a decompression error\n     - debian/patches/CVE-2026-9669.patch: make a libbz2 decompression error\n       sticky on the decompressor object and on the BZ2File read paths in\n       Modules/bz2module.c, so a reused object can no longer re-enter\n       BZ2_bzDecompress() on an errored stream and write out of bounds\n     - CVE-2026-9669","status":"published","published":"2026-09-16T16:15:45Z","modified":"2026-10-26T09:32:02.523967111Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"CLSA-2026-1789578322","title":"python3: Fix of CVE-2026-9669","description":"- CVE-2026-9669: fix a possible stack buffer overflow in bz2 by making a BZ2Decompressor unusable after libbz2 reports a decompression error","status":"published","published":"2026-09-16T17:05:32Z","modified":"2026-10-26T09:31:58.741069546Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1789578714","title":"python3: Fix of CVE-2026-9669","description":"- CVE-2026-9669: fix a possible stack buffer overflow in bz2 by making a BZ2Decompressor unusable after libbz2 reports a decompression error","status":"published","published":"2026-09-16T17:12:04Z","modified":"2026-10-26T09:31:56.206471395Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1789636275","title":"Fix CVE(s): CVE-2026-11972, CVE-2026-9669","description":"   * SECURITY UPDATE: quadratic parse time in the tarfile module when a\n     streaming archive declares an offset past the end of the stream\n     - debian/patches/CVE-2026-11972.patch: stop the forward-seek loop in\n       _Stream.seek() as soon as read() returns no data, in Lib/tarfile.py,\n       so a crafted mode=\"r|\" archive can no longer keep the parser reading\n       an exhausted stream.\n     - CVE-2026-11972\n   * SECURITY UPDATE: out-of-bounds write when a bz2 decompressor is reused\n     after a decompression error\n     - debian/patches/CVE-2026-9669.patch: record the libbzip2 error in the\n       BZ2Decompressor object and refuse any further decompress() call with\n       ValueError, in Modules/_bz2module.c, so retrying with the same object\n       can no longer re-enter BZ2_bzDecompress() on a bz_stream left in an\n       invalid internal state.\n     - CVE-2026-9669","status":"published","published":"2026-09-17T09:11:26Z","modified":"2026-10-26T09:32:02.520634539Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1789636518","title":"Fix CVE(s): CVE-2026-11972, CVE-2026-9669","description":"   * SECURITY UPDATE: quadratic parse time in the tarfile module when a\n     streaming archive declares an offset past the end of the stream\n     - debian/patches/CVE-2026-11972.patch: stop the forward-seek loop in\n       _Stream.seek() as soon as read() returns no data, in Lib/tarfile.py,\n       so a crafted mode=\"r|\" archive can no longer keep the parser reading\n       an exhausted stream.\n     - CVE-2026-11972\n   * SECURITY UPDATE: out-of-bounds write when a bz2 decompressor is reused\n     after a decompression error\n     - debian/patches/CVE-2026-9669.patch: record the libbzip2 error in the\n       BZ2Decompressor object and refuse any further decompress() call with\n       ValueError, in Modules/_bz2module.c, so retrying with the same object\n       can no longer re-enter BZ2_bzDecompress() on a bz_stream left in an\n       invalid internal state.\n     - CVE-2026-9669","status":"published","published":"2026-09-17T09:15:29Z","modified":"2026-10-26T09:32:04.225341592Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1789641197","title":"python3: Fix of CVE-2026-9669","description":"- CVE-2026-9669: fix a possible stack buffer overflow in bz2 by making a BZ2Decompressor unusable after libbz2 reports a decompression error","status":"published","published":"2026-09-21T23:25:31Z","modified":"2026-10-26T09:31:43.098854252Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1789661605","title":"python: Fix of 3 CVEs","description":"- CVE-2026-9669: fix a stack buffer overflow in the bz2 module when a\n  BZ2Decompressor object is reused after a decompression error; the\n  decompressor now becomes unusable once libbz2 reports an error, instead of\n  resuming from an invalid internal state","status":"published","published":"2026-10-20T23:03:05Z","modified":"2026-10-26T09:31:54.909701174Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1789662564","title":"python: Fix of CVE-2026-9669","description":"- CVE-2026-9669: fix a stack buffer overflow in the bz2 module when a\n  BZ2Decompressor object is reused after a decompression error; the\n  decompressor now becomes unusable once libbz2 reports an error, instead of\n  resuming from an invalid internal state","status":"published","published":"2026-09-21T23:36:18Z","modified":"2026-10-26T09:31:40.248823292Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1789735614","title":"python3.11: Fix of 5 CVEs","description":"- CVE-2026-87910: tarfile: skip a link member when the extraction filter\n  returns None for its hardlink-extraction fallback instead of ignoring the\n  filter result\n- CVE-2026-17084: stringprep: build the RFC 3454 B.2/B.3 tables from Unicode\n  3.2.0 data so IDNA 2003 encoding of newly case-folding characters no longer\n  depends on the interpreter's Unicode version\n- CVE-2026-15310: zipfile: bound the output of each bzip2/LZMA decompress()\n  call so a small crafted member cannot trigger an unbounded allocation\n- CVE-2026-9669: bz2: refuse to reuse a BZ2Decompressor after a decompression\n  error, so retrying with the same object can no longer resume from an invalid\n  internal state and write out of bounds\n- CVE-2026-11972: tarfile: stop the streaming-mode seek() loop at EOF so a\n  member header declaring a huge size no longer makes parsing take exponentially\n  longer","status":"published","published":"2026-09-18T12:47:09Z","modified":"2026-10-26T09:43:37.758888416Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1789741774","title":"python3.11: Fix of 2 CVEs","description":"- CVE-2026-11972: stop tarfile._Stream.seek() looping over the declared block\n  count once the stream is at EOF, so a crafted header advertising a huge\n  member size can no longer make a streaming-mode read take exponentially longer\n- CVE-2026-9669: latch the libbz2 error in BZ2Decompressor and refuse further\n  use with ValueError, so an application that retries a decompressor after an\n  OSError can no longer re-enter BZ2_bzDecompress() on invalid internal state\n  and drive out-of-bounds writes to a stack buffer","status":"published","published":"2026-09-18T14:29:46Z","modified":"2026-10-26T09:30:47.712828867Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1789747235","title":"python3.9: Fix of CVE-2026-9669","description":"- CVE-2026-9669: latch the libbz2 error in BZ2Decompressor and raise\n  ValueError from any further decompress(), so a decompressor that has\n  already failed can no longer be reused","status":"published","published":"2026-09-18T16:00:47Z","modified":"2026-10-26T09:30:47.622845016Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1789748541","title":"Fix CVE(s): CVE-2026-9669","description":"   * SECURITY UPDATE: out-of-bounds write via bz2 stream reuse after a\n     decompression error (CVE-2026-9669)\n     - debian/patches/CVE-2026-9669.patch: record the libbz2 error code on the\n       BZ2Decompressor and BZ2File objects in Modules/bz2module.c and refuse\n       every later decompress() or read() call, so BZ2_bzDecompress() is never\n       re-entered on a stream libbz2 has already reported an error for; adds\n       regression tests for both paths to Lib/test/test_bz2.py\n     - CVE-2026-9669","status":"published","published":"2026-09-18T16:22:32Z","modified":"2026-10-26T09:32:04.272313992Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1789900651","title":"Fix CVE(s): CVE-2026-11972, CVE-2026-9669","description":"   * SECURITY UPDATE: CPU denial-of-service in tarfile streaming mode via a\n     crafted archive that declares more blocks than it contains\n     - debian/patches/CVE-2026-11972.patch: in Lib/tarfile.py, break out of\n       the block loop in _Stream.seek() once read() returns no data, so an\n       archive opened in streaming mode (mode='r|') can no longer make\n       parsing take exponentially longer by declaring a block count past\n       end of file. Backport of upstream commit 3f031d431f80 (gh-151981 /\n       GH-151982), taken unchanged from this package's amazonlinux2els\n       branch where it was adapted for 3.7 by Qiantong Zhong\n       \u003czedzhong@amazon.com\u003e. Bundles the upstream regression test\n       test_getmembers_big_size (test_tarfile.py).\n     - CVE-2026-11972\n   * SECURITY UPDATE: out-of-bounds stack write when a bz2 decompressor is\n     reused after a decompression error\n     - debian/patches/CVE-2026-9669.patch: in Modules/_bz2module.c, record\n       the libbz2 error code on BZ2Decompressor and raise ValueError on any\n       further decompress() call, so an application that catches the OSError\n       and retries with the same decompressor can no longer make it resume\n       from an invalid internal state and write out of bounds to a stack\n       buffer. Backport of upstream commit 938ec030e90c (gh-150599 /\n       GH-150600) via the 3.10 backport; `self-\u003ebzerror = 0;` is placed by\n       hand in _bz2_BZ2Decompressor___init___impl(), whose lock-allocation\n       prologue differs in this version. Bundles the upstream regression\n       test test_decompress_after_data_error (test_bz2.py).\n     - CVE-2026-9669","status":"published","published":"2026-09-20T10:37:43Z","modified":"2026-10-26T09:31:53.180811097Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1789992787","title":"python2: Fix of 2 CVEs","description":"- CVE-2026-11972: break out of the block loop in tarfile._Stream.seek as soon\n  as read() returns no data, so a member header declaring a huge size can no\n  longer keep a stream-mode archive spinning until it is interrupted\n- CVE-2026-9669: latch the libbz2 error code in BZ2Decomp_decompress and raise\n  ValueError on any later call, so a BZ2Decompressor cannot be re-entered\n  after a decompression error and write outside its output buffer; the same\n  error is latched on BZ2FileObject through the new Util_BzRead wrapper, so a\n  BZ2File whose stream already errored re-reports that IOError on every later\n  read instead of re-entering BZ2_bzDecompress","status":"published","published":"2026-09-21T12:13:19Z","modified":"2026-10-26T09:31:44.407827796Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1789993180","title":"python2: Fix of 2 CVEs","description":"- CVE-2026-11972: break out of the block loop in tarfile._Stream.seek as soon\n  as read() returns no data, so a member header declaring a huge size can no\n  longer keep a stream-mode archive spinning until it is interrupted\n- CVE-2026-9669: latch the libbz2 error code in BZ2Decomp_decompress and raise\n  ValueError on any later call, so a BZ2Decompressor cannot be re-entered\n  after a decompression error and write outside its output buffer; the same\n  error is latched on BZ2FileObject through the new Util_BzRead wrapper, so a\n  BZ2File whose stream already errored re-reports that IOError on every later\n  read instead of re-entering BZ2_bzDecompress","status":"published","published":"2026-09-21T12:19:52Z","modified":"2026-10-26T09:31:51.528723618Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1789993238","title":"python3.9: Fix of 4 CVEs","description":"- CVE-2026-87910: tarfile: skip a link member when the extraction filter\n  returns None for its hardlink-extraction fallback instead of ignoring the\n  filter result\n- CVE-2026-17084: stringprep: build the RFC 3454 B.2/B.3 tables from Unicode\n  3.2.0 data so IDNA 2003 encoding of newly case-folding characters no longer\n  depends on the interpreter's Unicode version\n- CVE-2026-15310: zipfile: bound the output of each bzip2/LZMA decompress()\n  call so a small crafted member cannot trigger an unbounded allocation\n- CVE-2026-9669: bz2: refuse to reuse a BZ2Decompressor after a decompression\n  error, so retrying with the same object can no longer resume from an invalid\n  internal state and write out of bounds","status":"published","published":"2026-09-21T12:20:52Z","modified":"2026-10-26T09:43:29.599797391Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1789995979","title":"python3: Fix of 4 CVEs","description":"- CVE-2026-87910: tarfile: skip a link member when the extraction filter\n  returns None for its hardlink-extraction fallback instead of ignoring the\n  filter result\n- CVE-2026-17084: stringprep: build the RFC 3454 B.2/B.3 tables from Unicode\n  3.2.0 data so IDNA 2003 encoding of newly case-folding characters no longer\n  depends on the interpreter's Unicode version\n- CVE-2026-15310: zipfile: bound the output of each bzip2/LZMA decompress()\n  call so a small crafted member cannot trigger an unbounded allocation\n- CVE-2026-9669: bz2: refuse to reuse a BZ2Decompressor after a decompression\n  error, so retrying with the same object can no longer resume from an invalid\n  internal state and write out of bounds","status":"published","published":"2026-09-21T13:06:33Z","modified":"2026-10-26T09:43:32.352953053Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1790007232","title":"python3: Fix of 4 CVEs","description":"- CVE-2026-87910: tarfile: skip a link member when the extraction filter\n  returns None for its hardlink-extraction fallback instead of ignoring the\n  filter result\n- CVE-2026-17084: stringprep: build the RFC 3454 B.2/B.3 tables from Unicode\n  3.2.0 data so IDNA 2003 encoding of newly case-folding characters no longer\n  depends on the interpreter's Unicode version\n- CVE-2026-15310: zipfile: bound the output of each bzip2/LZMA decompress()\n  call so a small crafted member cannot trigger an unbounded allocation\n- CVE-2026-9669: bz2: refuse to reuse a BZ2Decompressor after a decompression\n  error, so retrying with the same object can no longer resume from an invalid\n  internal state and write out of bounds","status":"published","published":"2026-09-21T16:14:04Z","modified":"2026-10-26T09:43:41.12001764Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1790072312","title":"Fix CVE(s): CVE-2026-11972, CVE-2026-9669","description":"   * SECURITY UPDATE: CPU denial of service via unbounded block skipping past\n     end of stream in tarfile\n     - debian/patches/CVE-2026-11972.patch: break out of the block skipping\n       loop in _Stream.seek() as soon as read() returns no data in\n       Lib/tarfile.py, so an attacker declared member size can no longer make\n       parsing a stream mode (\"r|\") archive take exponentially longer; add\n       regression test to Lib/test/test_tarfile.py\n     - CVE-2026-11972\n   * SECURITY UPDATE: Out-of-bounds write when a bz2 decompressor or a BZ2File\n     handle is reused after a decompression error\n     - debian/patches/CVE-2026-9669.patch: record the failing libbz2 error\n       code on BZ2DecompObject and refuse any further decompress() call with\n       ValueError in Modules/bz2module.c, so crafted input can no longer make\n       BZ2_bzDecompress() resume from an invalid internal state and write out\n       of bounds to a stack buffer; also make the error sticky for the C\n       BZ2File read paths, which re-entered the errored stream in the same\n       way; add regression tests for both to Lib/test/test_bz2.py\n     - CVE-2026-9669","status":"published","published":"2026-09-22T10:18:43Z","modified":"2026-10-26T09:31:40.157576388Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1790075259","title":"python2: Fix of 2 CVEs","description":"- CVE-2026-11972: break out of the block loop in tarfile._Stream.seek as soon\n  as read() returns no data, so a member header declaring a huge size can no\n  longer keep a stream-mode archive spinning until it is interrupted\n- CVE-2026-9669: latch the libbz2 error code in BZ2Decomp_decompress and raise\n  ValueError on any later call, so a BZ2Decompressor cannot be re-entered\n  after a decompression error and write outside its output buffer; the same\n  error is latched on BZ2FileObject through the new Util_BzRead wrapper, so a\n  BZ2File whose stream already errored re-reports that IOError on every later\n  read instead of re-entering BZ2_bzDecompress","status":"published","published":"2026-09-22T11:07:50Z","modified":"2026-10-26T09:30:56.264435015Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"openSUSE-SU-2026:11181-1","title":"python314-3.14.6-1.1 on GA media","description":"These are all security issues fixed in the python314-3.14.6-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-02T00:00:00Z","modified":"2026-07-03T11:00:06.800628523Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:11747-1","title":"python310-3.10.21-1.1 on GA media","description":"These are all security issues fixed in the python310-3.10.21-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-10T00:00:00Z","modified":"2026-09-11T18:23:08.958834843Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:11748-1","title":"python315-3.15.0~rc2-1.1 on GA media","description":"These are all security issues fixed in the python315-3.15.0~rc2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-10T00:00:00Z","modified":"2026-09-11T18:23:08.956430992Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:11756-1","title":"python311-3.11.16-1.1 on GA media","description":"These are all security issues fixed in the python311-3.11.16-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-11T00:00:00Z","modified":"2026-09-12T10:30:05.928501941Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:11757-1","title":"python312-3.12.14-1.1 on GA media","description":"These are all security issues fixed in the python312-3.12.14-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-11T00:00:00Z","modified":"2026-09-12T10:30:06.111795894Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:11817-1","title":"python313-3.13.15-1.1 on GA media","description":"These are all security issues fixed in the python313-3.13.15-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-18T00:00:00Z","modified":"2026-09-19T18:23:08.191054041Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"PSF-2026-27","description":"bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.","status":"published","published":"2026-06-08T22:01:15.42Z","modified":"2026-08-11T08:16:05.646826Z","updated_at":"2026-11-02T15:52:50.667197Z"},{"id":"ROOT-OS-ALPINE-320-CVE-2026-9669","title":"CVE-2026-9669 in python3 - Patched by Root","description":"Root has patched CVE-2026-9669 in the python3 package for Root:Alpine:3.20. Multiple fixed versions available.","status":"published","published":"2026-09-29T10:23:47Z","modified":"2026-09-29T11:15:07.157261738Z","updated_at":"2026-11-02T15:53:28.544053Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2026-9669","title":"CVE-2026-9669 in python3.9 - Patched by Root","description":"Root has patched CVE-2026-9669 in the python3.9 package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-09-11T09:07:53Z","modified":"2026-09-11T10:15:06.329701839Z","updated_at":"2026-11-02T15:53:30.44348Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-9669","title":"CVE-2026-9669 in python3.11 - Patched by Root","description":"Root has patched CVE-2026-9669 in the python3.11 package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-09-11T06:31:32Z","modified":"2026-09-11T07:15:06.439509777Z","updated_at":"2026-11-02T15:53:32.570806Z"},{"id":"SUSE-SU-2026:23743-1","title":"Security update for python311","description":"This update for python311 fixes the following issues:\n\n- CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611).\n- CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the\n  `configparser` module is used (bsc#1269066).\n- CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF (bsc#1261969).\n- CVE-2026-2297: cpython: incorrectly handled hook in FileLoader can lead to validation bypass (bsc#1259240).\n- CVE-2026-3276: quadratic complexity in `unicodedata.normalize()` can lead to DoS when processing specially crafted\n  Unicode input (bsc#1267581).\n- CVE-2026-3644: incomplete control character validation in http.cookies (bsc#1259734).\n- CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735).\n- CVE-2026-4360: in the Tarfile.extract() function, the filter parameter is not passed properly when extracting\n  hardlinks (bsc#1269959).\n- CVE-2026-4519: leading dashes in URLs are accepted by the `webbrowser.open()` API and allow for web browser command\n  line option injection (bsc#1260026).\n- CVE-2026-4786: Incomplete mitigation of %action expansion for command injection to webbrowser.open() (bsc#1262319).\n- CVE-2026-6100: Arbitrary code execution or information disclosure via use-after-free in decompression modules\n  (bsc#1262098).\n- CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding\n  protection (bsc#1264962).\n- CVE-2026-7774: `tarfile.data_filter` path traversal bypass allows writing outside the extraction directory\n  (bsc#1267821).\n- CVE-2026-8328: `ftpcp()` does not use actual peer address and trusts server-supplied PASV host address (bsc#1265268).\n- CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974).\n- CVE-2026-11940: tarfile extraction filter bypass via a crafted archive allows escaping the destination directory and\n  enables arbitrary file reads and writes (bsc#1268977).\n- CVE-2026-11972: infinite loop due to improper EOF handling in the tarfile module streaming mode can lead to DoS\n  (bsc#1269788).\n- CVE-2026-15308: Incremental HTMLParser allows CPU-exhaustion DoS via repeated unterminated markup declarations\n  (bsc#1271192).\n- CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another\n  scheme (bsc#1276223).\n- CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226).\n\nChanges for python311:\n\n- Update to 3.11.16:\n - Build\n - gh-153438: Update Windows build and installer tooling and\n documentation to use the current download URL for\n nuget.exe.\n - Library\n - gh-109638: Fix exponential time in csv.Sniffer.sniff() for\n a sample which contains many quote characters. A doubled\n quote character is now also detected in a field which\n contains the delimiter or a line break.\n - gh-98820: Fix quadratic time in csv.Sniffer.sniff() for\n a sample which contains quoted fields, in particular for\n a single column of quoted fields.\n - gh-149231: In tomllib, the number of parts in TOML keys is\n now limited.\n - gh-146083: Update bundled libexpat to version 2.7.5.\n - gh-141707: Don't change tarfile.TarInfo type from AREGTYPE\n to DIRTYPE when parsing GNU long name or link headers\n (bsc#1259611, CVE-2025-13462).\n - gh-90949: Add\n SetBillionLaughsAttackProtectionActivationThreshold() and\n SetBillionLaughsAttackProtectionMaximumAmplification() to\n xmlparser objects to tune protections against billion\n laughs attacks. Patch by B�n�dikt Tran.\n - gh-100372: ssl.SSLContext.load_verify_locations() no longer\n incorrectly accepts some cases of trailing data when\n parsing DER.\n - Security\n - gh-155558: Update bundled libexpat to version 2.8.3 for the\n fix to CVE-2026-72522.\n - gh-153030: Fixed quadratic complexity in incremental\n parsing of long unterminated constructs (such as tags or\n comments) in html.parser.HTMLParser, which could be\n exploited for a denial of service (bsc#1271192,\n CVE-2026-15308).\n - gh-152674: The xml.etree.ElementTree.Element methods\n findall(), iterfind() and find() avoid quadratic behavior\n when using XPath index predicates ([1], [last()],\n [last()-N]) on XML documents with many same-tag siblings.\n - gh-152216: Update bundled libexpat to version 2.8.2.\n - gh-151987: The tarfile.TarFile.extract() method now applies\n the given filter when it extracts a link target from the\n archive as a fallback (bsc#1269959, CVE-2026-4360).\n - gh-151981: In tarfile, seeking a stream now stops when end\n of the stream is reached (bsc#1269788, CVE-2026-11972).\n - gh-151544: Modules/Setup.local is no longer used as\n a landmark to discover whether Python is running in\n a source tree, as it could potentially affect actual\n installs. The pybuilddir.txt file is now the sole indicator\n of running in a source tree.\n - gh-151558: Fixed an vulnerability in the tarfile data and\n tar extraction filters where crafted archives could create\n a symlink pointing outside the destination directory. This\n was a bypass of CVE-2025-4330 (bsc#1268977,\n CVE-2026-11940).\n - gh-150599: Fix a possible stack buffer overflow in bz2 when\n a bz2.BZ2Decompressor is reused after a decompression\n error. The decompressor now becomes unusable after libbz2\n reports an error (bsc#1267974, CVE-2026-9669).\n - gh-150743: http.client now limits the number of\n chunked-response trailer lines it will read to 100, and the\n number of interim (1xx) responses it will skip to 100.\n A malicious or broken server could previously stream\n trailer lines or 100 Continue responses forever, hanging\n the client even when a socket timeout was in use. Reported\n by @YLChen-007 via GHSA-w4q2-g22w-6fr4.\n - gh-149698: Update bundled libexpat to version 2.8.1 for the\n fix for CVE-2026-45186.\n - gh-87451: The ftplib module's undocumented ftpcp function\n no longer trusts the IPv4 address value returned from the\n source server in response to the PASV command by default,\n completing the fix for CVE-2021-4189. As with ftplib.FTP,\n the former behavior can be re-enabled by setting the\n trust_server_pasv_ipv4_address attribute on the source\n ftplib.FTP instance to True. Thanks to Qi Deng at Aurascape\n AI for the report (bsc#1265268, CVE-2026-8328).\n - gh-149486: tarfile.data_filter() now validates link targets\n using the same normalised value that is written to disk,\n strips trailing separators from the member name when\n resolving a symlink's directory, and rejects link members\n that would replace the destination directory itself. This\n closes several path-traversal bypasses of the data\n extraction filter (bsc#1267821, CVE-2026-7774).\n - gh-149079: Fix a potential denial of service in\n unicodedata.normalize(). The canonical ordering step of\n Unicode normalization used a quadratic-time insertion sort\n for reordering combining characters, which could be\n exploited with crafted input containing many combining\n characters in non-canonical order. Replaced with\n a linear-time counting sort for long runs (bsc#1267581,\n CVE-2026-3276).\n - gh-149018: Improved protection against XML hash-flooding\n attacks in xml.parsers.expat and xml.etree.ElementTree when\n Python is compiled with libExpat 2.8.0 or later\n (bsc#1264962, CVE-2026-7210).\n - gh-149017: Update bundled libexpat to version 2.8.0.\n - gh-148808: Added buffer boundary check when using nbytes\n parameter with\n asyncio.AbstractEventLoop.sock_recvfrom_into(). Only\n relevant for Windows and the asyncio.ProactorEventLoop.\n - gh-148395: Fix a dangling input pointer in\n lzma.LZMADecompressor, and bz2.BZ2Decompressor when memory\n allocation fails with MemoryError, which could let\n a subsequent decompress() call read or write through\n a stale pointer to the already-released caller buffer\n (bsc#1262098, CVE-2026-6100).\n - gh-148169: A bypass in webbrowser allowed URLs prefixed\n with %action to pass the dash-prefix safety check\n (bsc#1262319, CVE-2026-4786).\n - gh-146581: Fix vulnerability in shutil.unpack_archive() for\n ZIP files on Windows which allowed to write files outside\n of the destination tree if the patch in the archive\n contains a Windows drive prefix. Now such invalid paths\n will be skipped. Files containing \"..\" in the name (like\n \"foo..bar\") are no longer skipped.\n - gh-146333: Fix quadratic backtracking in\n configparser.RawConfigParser option parsing regexes (OPTCRE\n and OPTCRE_NV). A crafted configuration line with many\n whitespace characters could cause excessive CPU usage.\n - gh-146211: Reject CR/LF characters in tunnel request\n headers for the HTTPConnection.set_tunnel() method\n (bsc#1261969, CVE-2026-1502).\n - gh-145986: xml.parsers.expat: Fixed a crash caused by\n unbounded C recursion when converting deeply nested XML\n content models with ElementDeclHandler(). This addresses\n CVE-2026-4224 (bsc#1259735, CVE-2026-4224).\n - gh-145599: Reject control characters in http.cookies.Morsel\n update() and js_output(). This addresses CVE-2026-3644\n (bsc#1259734, CVE-2026-3644).\n - gh-145506: Fixes CVE-2026-2297 by ensuring that\n SourcelessFileLoader uses io.open_code() when opening .pyc\n files (bsc#1259240, CVE-2026-2297).\n - gh-144370: Disallow usage of control characters in status\n in wsgiref.handlers to prevent HTTP header injections.\n Patch by Benedikt Johannes.\n - gh-143930: Reject leading dashes in URLs passed to\n webbrowser.open() (bsc#1260026, CVE-2026-4519).\n - gh-143927: Normalize all line endings (CR, CRLF, and LF) to\n LF+TAB when writing multi-line configparser values\n (bsc#1269066, CVE-2026-0864).\n - Tests\n - gh-149776: Fix test_socket on Linux kernel 7.1 and newer:\n skip UDP Lite tests if it's not supported. Patch by Victor\n Stinner.\n","status":"published","published":"2026-09-16T09:45:01Z","modified":"2026-09-27T18:23:10.677871156Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:23845-1","title":"Security update for python311","description":"This update for python311 fixes the following issues:\n\n- CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974).\n- CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another\n  scheme (bsc#1276223).\n- CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside \n  Unicode 3.2.0 (bsc#1276226).\n\nChanges for python311:\n\n- Updated to version 3.11.16\n","status":"published","published":"2026-09-16T09:46:06Z","modified":"2026-09-27T18:23:15.638766629Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:4396-1","title":"Security update for python311","description":"This update for python311 fixes the following issues:\n\n- CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974).\n- CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111).\n- CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another\n  scheme (bsc#1276223).\n- CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226).\n- CVE-2026-19672: The tarfile module's tar and data extraction filters created directories outside the destination for\n  members whose name leaves the destination and retu (bsc#1276227).\n\nChanges for python311:\n\n- Update to version 3.11.16.\n","status":"published","published":"2026-09-29T13:34:58Z","modified":"2026-09-30T12:00:05.050575008Z","updated_at":"2026-11-02T15:54:05.838224Z"}]},"sources_more":{"osv":9}}