Vulnerability-Lookup

RHSA-2026:68132

Vulnerability from csaf_redhat - Published: 2026-09-16 14:09 - Updated: 2026-09-21 11:38

Summary

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Severity

Important

Notes

Topic: An update for Red Hat Hardened Images RPMs is now available.

Details: This update includes the following RPMs: python3.10: * python3.10-3.10.21-1.3.hum1 (aarch64, x86_64) * python3.10-debug-3.10.21-1.3.hum1 (aarch64, x86_64) * python3.10-devel-3.10.21-1.3.hum1 (aarch64, x86_64) * python3.10-idle-3.10.21-1.3.hum1 (aarch64, x86_64) * python3.10-libs-3.10.21-1.3.hum1 (aarch64, x86_64) * python3.10-test-3.10.21-1.3.hum1 (aarch64, x86_64) * python3.10-tkinter-3.10.21-1.3.hum1 (aarch64, x86_64) * python3.10-3.10.21-1.3.hum1.src (src) Security Fix(es): python3.10: * CVE-2026-82049

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-3276

A flaw was found in the `unicodedata.normalize()` function in Python. This vulnerability allows a remote attacker to cause excessive CPU consumption by providing specially crafted Unicode input. Successful exploitation can lead to a Denial of Service (DoS) on the affected system.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-606 - Unchecked Input for Loop Condition

Affected products

Fixed 15 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@src	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-8328

A flaw was found in the `ftplib.py` module of Python. This vulnerability allows a remote attacker to bypass a previous security fix by manipulating the `ftpcp()` function. By supplying a malicious IP address and port, an attacker can redirect FTP connections to an arbitrary host. This could lead to the compromise of data integrity or other network-based attacks.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-807 - Reliance on Untrusted Inputs in a Security Decision

Affected products

Fixed 15 products, the same list as for CVE-2026-3276

Threats

Impact Important

CVE-2026-9669

A flaw was found in Python's `bz2.BZ2Decompressor` component. An attacker could provide specially crafted input that, when processed by an application reusing a decompressor object after an error, could lead to out-of-bounds writes in memory. This memory corruption could cause the application to crash, resulting in a Denial of Service (DoS).

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 15 products, the same list as for CVE-2026-3276

Threats

Impact Moderate

CVE-2026-82049

A flaw was found in Python's `tarfile` module. This module's data and tar extraction filters are vulnerable to specially crafted archives containing a hard link to a symbolic link. An attacker could exploit this by providing a malicious archive. This could lead to unauthorized modification of file permissions or modification times for files outside the intended extraction directory, or the disclosure of sensitive file contents within the extracted tree.

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Affected products

Fixed 15 products, the same list as for CVE-2026-3276

Threats

Impact Important

References

37 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:68132	self
https://access.redhat.com/security/cve/CVE-2026-82049	external
https://access.redhat.com/security/updates/classi…	external
https://images.redhat.com/	external
https://access.redhat.com/security/cve/CVE-2026-9669	external
https://access.redhat.com/security/cve/CVE-2026-3276	external
https://access.redhat.com/security/cve/CVE-2026-8328	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-3276	self
https://bugzilla.redhat.com/show_bug.cgi?id=2484424	external
https://www.cve.org/CVERecord?id=CVE-2026-3276	external
https://nvd.nist.gov/vuln/detail/CVE-2026-3276	external
https://github.com/python/cpython/issues/149079	external
https://github.com/python/cpython/pull/149080	external
https://mail.python.org/archives/list/security-an…	external
https://access.redhat.com/security/cve/CVE-2026-8328	self
https://bugzilla.redhat.com/show_bug.cgi?id=2477300	external
https://www.cve.org/CVERecord?id=CVE-2026-8328	external
https://nvd.nist.gov/vuln/detail/CVE-2026-8328	external
https://github.com/python/cpython/issues/87451	external
https://github.com/python/cpython/pull/149648	external
https://mail.python.org/archives/list/security-an…	external
https://access.redhat.com/security/cve/CVE-2026-9669	self
https://bugzilla.redhat.com/show_bug.cgi?id=2486590	external
https://www.cve.org/CVERecord?id=CVE-2026-9669	external
https://nvd.nist.gov/vuln/detail/CVE-2026-9669	external
https://github.com/python/cpython/issues/150599	external
https://github.com/python/cpython/pull/150600	external
https://mail.python.org/archives/list/security-an…	external
https://access.redhat.com/security/cve/CVE-2026-82049	self
https://bugzilla.redhat.com/show_bug.cgi?id=2533296	external
https://www.cve.org/CVERecord?id=CVE-2026-82049	external
https://nvd.nist.gov/vuln/detail/CVE-2026-82049	external
https://github.com/python/cpython/commit/5a57248b…	external
https://github.com/python/cpython/issues/157190	external
https://github.com/python/cpython/pull/157191	external
https://mail.python.org/archives/list/security-an…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\npython3.10:\n  * python3.10-3.10.21-1.3.hum1 (aarch64, x86_64)\n  * python3.10-debug-3.10.21-1.3.hum1 (aarch64, x86_64)\n  * python3.10-devel-3.10.21-1.3.hum1 (aarch64, x86_64)\n  * python3.10-idle-3.10.21-1.3.hum1 (aarch64, x86_64)\n  * python3.10-libs-3.10.21-1.3.hum1 (aarch64, x86_64)\n  * python3.10-test-3.10.21-1.3.hum1 (aarch64, x86_64)\n  * python3.10-tkinter-3.10.21-1.3.hum1 (aarch64, x86_64)\n  * python3.10-3.10.21-1.3.hum1.src (src)\n\nSecurity Fix(es):\n\npython3.10:\n  * CVE-2026-82049",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:68132",
        "url": "https://access.redhat.com/errata/RHSA-2026:68132"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-82049",
        "url": "https://access.redhat.com/security/cve/CVE-2026-82049"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-9669",
        "url": "https://access.redhat.com/security/cve/CVE-2026-9669"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-3276",
        "url": "https://access.redhat.com/security/cve/CVE-2026-3276"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-8328",
        "url": "https://access.redhat.com/security/cve/CVE-2026-8328"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68132.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
    "tracking": {
      "current_release_date": "2026-09-21T11:38:37+00:00",
      "generator": {
        "date": "2026-09-21T11:38:37+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:68132",
      "initial_release_date": "2026-09-16T14:09:13+00:00",
      "revision_history": [
        {
          "date": "2026-09-16T14:09:13+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-18T13:07:56+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-21T11:38:37+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3.10-0:3.10.21-1.3.hum1@aarch64",
                "product": {
                  "name": "python3.10-0:3.10.21-1.3.hum1@aarch64",
                  "product_id": "python3.10-0:3.10.21-1.3.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.10@3.10.21-1.3.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.10-debug-0:3.10.21-1.3.hum1@aarch64",
                "product": {
                  "name": "python3.10-debug-0:3.10.21-1.3.hum1@aarch64",
                  "product_id": "python3.10-debug-0:3.10.21-1.3.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.10-debug@3.10.21-1.3.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.10-devel-0:3.10.21-1.3.hum1@aarch64",
                "product": {
                  "name": "python3.10-devel-0:3.10.21-1.3.hum1@aarch64",
                  "product_id": "python3.10-devel-0:3.10.21-1.3.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.10-devel@3.10.21-1.3.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.10-idle-0:3.10.21-1.3.hum1@aarch64",
                "product": {
                  "name": "python3.10-idle-0:3.10.21-1.3.hum1@aarch64",
                  "product_id": "python3.10-idle-0:3.10.21-1.3.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.10-idle@3.10.21-1.3.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.10-libs-0:3.10.21-1.3.hum1@aarch64",
                "product": {
                  "name": "python3.10-libs-0:3.10.21-1.3.hum1@aarch64",
                  "product_id": "python3.10-libs-0:3.10.21-1.3.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.10-libs@3.10.21-1.3.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.10-test-0:3.10.21-1.3.hum1@aarch64",
                "product": {
                  "name": "python3.10-test-0:3.10.21-1.3.hum1@aarch64",
                  "product_id": "python3.10-test-0:3.10.21-1.3.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.10-test@3.10.21-1.3.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64",
                "product": {
                  "name": "python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64",
                  "product_id": "python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.10-tkinter@3.10.21-1.3.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3.10-0:3.10.21-1.3.hum1@src",
                "product": {
                  "name": "python3.10-0:3.10.21-1.3.hum1@src",
                  "product_id": "python3.10-0:3.10.21-1.3.hum1@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.10@3.10.21-1.3.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3.10-0:3.10.21-1.3.hum1@x86_64",
                "product": {
                  "name": "python3.10-0:3.10.21-1.3.hum1@x86_64",
                  "product_id": "python3.10-0:3.10.21-1.3.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.10@3.10.21-1.3.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.10-debug-0:3.10.21-1.3.hum1@x86_64",
                "product": {
                  "name": "python3.10-debug-0:3.10.21-1.3.hum1@x86_64",
                  "product_id": "python3.10-debug-0:3.10.21-1.3.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.10-debug@3.10.21-1.3.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.10-devel-0:3.10.21-1.3.hum1@x86_64",
                "product": {
                  "name": "python3.10-devel-0:3.10.21-1.3.hum1@x86_64",
                  "product_id": "python3.10-devel-0:3.10.21-1.3.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.10-devel@3.10.21-1.3.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.10-idle-0:3.10.21-1.3.hum1@x86_64",
                "product": {
                  "name": "python3.10-idle-0:3.10.21-1.3.hum1@x86_64",
                  "product_id": "python3.10-idle-0:3.10.21-1.3.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.10-idle@3.10.21-1.3.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.10-libs-0:3.10.21-1.3.hum1@x86_64",
                "product": {
                  "name": "python3.10-libs-0:3.10.21-1.3.hum1@x86_64",
                  "product_id": "python3.10-libs-0:3.10.21-1.3.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.10-libs@3.10.21-1.3.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.10-test-0:3.10.21-1.3.hum1@x86_64",
                "product": {
                  "name": "python3.10-test-0:3.10.21-1.3.hum1@x86_64",
                  "product_id": "python3.10-test-0:3.10.21-1.3.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.10-test@3.10.21-1.3.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64",
                "product": {
                  "name": "python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64",
                  "product_id": "python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3.10-tkinter@3.10.21-1.3.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.10-0:3.10.21-1.3.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@aarch64"
        },
        "product_reference": "python3.10-0:3.10.21-1.3.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.10-0:3.10.21-1.3.hum1@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@src"
        },
        "product_reference": "python3.10-0:3.10.21-1.3.hum1@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.10-0:3.10.21-1.3.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@x86_64"
        },
        "product_reference": "python3.10-0:3.10.21-1.3.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.10-debug-0:3.10.21-1.3.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@aarch64"
        },
        "product_reference": "python3.10-debug-0:3.10.21-1.3.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.10-debug-0:3.10.21-1.3.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@x86_64"
        },
        "product_reference": "python3.10-debug-0:3.10.21-1.3.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.10-devel-0:3.10.21-1.3.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@aarch64"
        },
        "product_reference": "python3.10-devel-0:3.10.21-1.3.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.10-devel-0:3.10.21-1.3.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@x86_64"
        },
        "product_reference": "python3.10-devel-0:3.10.21-1.3.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.10-idle-0:3.10.21-1.3.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@aarch64"
        },
        "product_reference": "python3.10-idle-0:3.10.21-1.3.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.10-idle-0:3.10.21-1.3.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@x86_64"
        },
        "product_reference": "python3.10-idle-0:3.10.21-1.3.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.10-libs-0:3.10.21-1.3.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@aarch64"
        },
        "product_reference": "python3.10-libs-0:3.10.21-1.3.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.10-libs-0:3.10.21-1.3.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@x86_64"
        },
        "product_reference": "python3.10-libs-0:3.10.21-1.3.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.10-test-0:3.10.21-1.3.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@aarch64"
        },
        "product_reference": "python3.10-test-0:3.10.21-1.3.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.10-test-0:3.10.21-1.3.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@x86_64"
        },
        "product_reference": "python3.10-test-0:3.10.21-1.3.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64"
        },
        "product_reference": "python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64"
        },
        "product_reference": "python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-3276",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-06-03T16:01:43.430825+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484424"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `unicodedata.normalize()` function in Python. This vulnerability allows a remote attacker to cause excessive CPU consumption by providing specially crafted Unicode input. Successful exploitation can lead to a Denial of Service (DoS) on the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python: Python unicodedata: Denial of Service due to excessive CPU consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Moderate: A flaw in the `unicodedata.normalize()` function in Python can lead to excessive CPU consumption when processing specially crafted Unicode input. This vulnerability could result in a Denial of Service on systems where applications process untrusted Unicode data using this function, impacting the availability of affected Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@src",
          "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-3276"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484424",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484424"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-3276",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-3276"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3276",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3276"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/issues/149079",
          "url": "https://github.com/python/cpython/issues/149079"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/pull/149080",
          "url": "https://github.com/python/cpython/pull/149080"
        },
        {
          "category": "external",
          "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/PP5HB4K7727OBBM76KA2ILID76K3OZGZ/",
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/PP5HB4K7727OBBM76KA2ILID76K3OZGZ/"
        }
      ],
      "release_date": "2026-06-03T14:29:39.727000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T14:09:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@src",
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68132"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@src",
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@src",
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "python: Python unicodedata: Denial of Service due to excessive CPU consumption"
    },
    {
      "cve": "CVE-2026-8328",
      "cwe": {
        "id": "CWE-807",
        "name": "Reliance on Untrusted Inputs in a Security Decision"
      },
      "discovery_date": "2026-05-13T21:01:20.805442+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477300"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `ftplib.py` module of Python. This vulnerability allows a remote attacker to bypass a previous security fix by manipulating the `ftpcp()` function. By supplying a malicious IP address and port, an attacker can redirect FTP connections to an arbitrary host. This could lead to the compromise of data integrity or other network-based attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python: Python: FTP connection redirection via ftpcp() function bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@src",
          "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-8328"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477300",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477300"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-8328",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-8328"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-8328",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8328"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/issues/87451",
          "url": "https://github.com/python/cpython/issues/87451"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/pull/149648",
          "url": "https://github.com/python/cpython/pull/149648"
        },
        {
          "category": "external",
          "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/ITF2BAPBQEPYK3LDMPRSY435JGNHYNDP/",
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/ITF2BAPBQEPYK3LDMPRSY435JGNHYNDP/"
        }
      ],
      "release_date": "2026-05-13T20:14:33.751000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T14:09:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@src",
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68132"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@src",
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python: Python: FTP connection redirection via ftpcp() function bypass"
    },
    {
      "cve": "CVE-2026-9669",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-06-08T23:00:54.235732+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2486590"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Python\u0027s `bz2.BZ2Decompressor` component. An attacker could provide specially crafted input that, when processed by an application reusing a decompressor object after an error, could lead to out-of-bounds writes in memory. This memory corruption could cause the application to crash, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python: Python: Denial of Service via out-of-bounds write in BZ2 decompression",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate-impact flaw in Python\u0027s `bz2.BZ2Decompressor` component affects Red Hat Enterprise Linux 8. It allows an attacker to trigger a denial of service by providing specially crafted compressed data. Exploitation requires an application to reuse a `BZ2Decompressor` object after a decompression error, leading to out-of-bounds writes and a crash.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@src",
          "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-9669"
        },
        {
          "category": "external",
          "summary": "RHBZ#2486590",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486590"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-9669",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-9669"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9669",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9669"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/issues/150599",
          "url": "https://github.com/python/cpython/issues/150599"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/pull/150600",
          "url": "https://github.com/python/cpython/pull/150600"
        },
        {
          "category": "external",
          "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/DBJZETMGUIFK7DVUWMOXHD3Z6IX2QPSX/",
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/DBJZETMGUIFK7DVUWMOXHD3Z6IX2QPSX/"
        }
      ],
      "release_date": "2026-06-08T22:01:15.420000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T14:09:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@src",
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68132"
        },
        {
          "category": "workaround",
          "details": "Applications processing untrusted BZ2 compressed data should avoid reusing `bz2.BZ2Decompressor` objects after a decompression error. Instead, a new `bz2.BZ2Decompressor` instance should be created for each new decompression attempt or after an error occurs. This prevents the decompressor from resuming from an invalid internal state.",
          "product_ids": [
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@src",
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@src",
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "python: Python: Denial of Service via out-of-bounds write in BZ2 decompression"
    },
    {
      "cve": "CVE-2026-82049",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "discovery_date": "2026-09-14T19:21:00.850652+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2533296"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Python\u0027s `tarfile` module. This module\u0027s data and tar extraction filters are vulnerable to specially crafted archives containing a hard link to a symbolic link. An attacker could exploit this by providing a malicious archive. This could lead to unauthorized modification of file permissions or modification times for files outside the intended extraction directory, or the disclosure of sensitive file contents within the extracted tree.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python: Python tarfile module: File modification and content disclosure via crafted archives",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@src",
          "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@x86_64",
          "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64",
          "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-82049"
        },
        {
          "category": "external",
          "summary": "RHBZ#2533296",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533296"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-82049",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-82049"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-82049",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82049"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/commit/5a57248b22ad3b9aafcaaadae2c304a1923daeca",
          "url": "https://github.com/python/cpython/commit/5a57248b22ad3b9aafcaaadae2c304a1923daeca"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/issues/157190",
          "url": "https://github.com/python/cpython/issues/157190"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/pull/157191",
          "url": "https://github.com/python/cpython/pull/157191"
        },
        {
          "category": "external",
          "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/EFJWGAZJA56AKSBR2WHMHQZO7RRLZPRH/",
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/EFJWGAZJA56AKSBR2WHMHQZO7RRLZPRH/"
        }
      ],
      "release_date": "2026-09-14T19:14:03.873000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T14:09:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@src",
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68132"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@src",
            "Red Hat Hardened Images:python3.10-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-debug-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-devel-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-idle-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-libs-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-test-0:3.10.21-1.3.hum1@x86_64",
            "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@aarch64",
            "Red Hat Hardened Images:python3.10-tkinter-0:3.10.21-1.3.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python: Python tarfile module: File modification and content disclosure via crafted archives"
    }
  ]
}

CVE-2026-3276 (GCVE-0-2026-3276)

Vulnerability from cvelistv5 – Published: 2026-06-03 14:29 – Updated: 2026-08-13 00:28

Title

Potential DoS via quadratic complexity in unicodedata.normalize()

Summary

unicodedata.normalize() can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canonical Combining Class values. This affects all normalization forms.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-03 17:27 UTC

CWE

CWE-407

Assigner

PSF mitre root

References

12 references

URL	Tags
https://mail.python.org/archives/list/security-an…	vendor-advisory
https://github.com/python/cpython/pull/149080	patch
https://github.com/python/cpython/issues/149079	issue-tracking
https://github.com/python/cpython/commit/6b505d1f…	patch
https://github.com/python/cpython/commit/991224b1…	patch
https://github.com/python/cpython/commit/ba785b88…	patch
https://github.com/python/cpython/commit/c5512bd7…	patch
https://github.com/python/cpython/commit/90748760…	patch
https://github.com/python/cpython/commit/d3ab945a…	patch
https://github.com/python/cpython/commit/db744c07…	patch
https://github.com/python/cpython/commit/e322a185…	patch
http://www.openwall.com/lists/oss-security/2026/0…

Impacted products

1 product

Vendor	Product	Version
Python Software Foundation	CPython	Affected: 0 , < 3.10.21 (python) Affected: 3.11.0 , < 3.11.16 (python) Affected: 3.12.0 , < 3.12.14 (python) Affected: 3.13.0 , < 3.13.14 (python) Affected: 3.14.0 , < 3.14.6 (python) Affected: 3.15.0a1 , < 3.15.0b2 (python)

Credits

Seokchan Yoon (https://github.com/ch4n3-yoon) Tim Peters (https://github.com/tim-one) Bénédikt Tran (https://github.com/picnixz) Serhiy Storchaka (https://github.com/serhiy-storchaka) Stan Ulbrych (https://github.com/StanFromIreland) Seth Larson (https://github.com/sethmlarson) Petr Viktorin (https://github.com/encukou)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-3276",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-03T17:27:09.393265Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-03T17:27:19.179Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-06-03T19:18:17.828Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/06/03/15"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CPython",
          "repo": "https://github.com/python/cpython",
          "vendor": "Python Software Foundation",
          "versions": [
            {
              "lessThan": "3.10.21",
              "status": "affected",
              "version": "0",
              "versionType": "python"
            },
            {
              "lessThan": "3.11.16",
              "status": "affected",
              "version": "3.11.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.12.14",
              "status": "affected",
              "version": "3.12.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.13.14",
              "status": "affected",
              "version": "3.13.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.14.6",
              "status": "affected",
              "version": "3.14.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.15.0b2",
              "status": "affected",
              "version": "3.15.0a1",
              "versionType": "python"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Seokchan Yoon (https://github.com/ch4n3-yoon)"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "Tim Peters (https://github.com/tim-one)"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "B\u00e9n\u00e9dikt Tran (https://github.com/picnixz)"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "Serhiy Storchaka (https://github.com/serhiy-storchaka)"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "Stan Ulbrych (https://github.com/StanFromIreland)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Seth Larson (https://github.com/sethmlarson)"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "Petr Viktorin (https://github.com/encukou)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eunicodedata.normalize()\u003c/span\u003e can take excessive CPU time when processing\u003cbr\u003especially crafted Unicode input containing long runs of combining characters\u003cbr\u003ewith alternating Canonical Combining Class values.\u003cbr\u003eThis affects all normalization forms."
            }
          ],
          "value": "unicodedata.normalize() can take excessive CPU time when processing\nspecially crafted Unicode input containing long runs of combining characters\nwith alternating Canonical Combining Class values.\nThis affects all normalization forms."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-407",
              "description": "CWE-407",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T00:28:05.768Z",
        "orgId": "28c92f92-d60d-412d-b760-e73465c3df22",
        "shortName": "PSF"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/PP5HB4K7727OBBM76KA2ILID76K3OZGZ/"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/pull/149080"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/python/cpython/issues/149079"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/6b505d1f41f8f3ea0fe5a4786d3a8fff1875cfc0"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/991224b1e8311c85f198f6dd8208bf8cff7fc26f"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/ba785b88add96acbf403d65cb157fb2743a33a32"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/c5512bd7c1dc28055660565275012766941d3066"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/90748760d38ca3ac5fc6788a69becab905c95598"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/d3ab945af25b28dfe13ac6cb40c124a01b33ce1f"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/db744c0776c1d5dd11aaa70eff2a6993c408bacc"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/e322a1857084d521f79f45181b776f62e6acfc2c"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Potential DoS via quadratic complexity in unicodedata.normalize()",
      "x_generator": {
        "engine": "Vulnogram 0.6.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "28c92f92-d60d-412d-b760-e73465c3df22",
    "assignerShortName": "PSF",
    "cveId": "CVE-2026-3276",
    "datePublished": "2026-06-03T14:29:39.727Z",
    "dateReserved": "2026-02-26T15:19:46.862Z",
    "dateUpdated": "2026-08-13T00:28:05.768Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-82049 (GCVE-0-2026-82049)

Vulnerability from cvelistv5 – Published: 2026-09-14 19:14 – Updated: 2026-09-16 03:56

Title

tarfile extraction filters allow file modification and content disclosure via hard link to symlink

Summary

In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose the contents of that file within the extracted tree.

Severity

8.4 (High)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-15 00:00 UTC

CWE

CWE-59

Assigner

PSF mitre root

References

7 references

URL	Tags
https://github.com/python/cpython/commit/5a57248b…	patch
https://github.com/python/cpython/issues/157190	issue-tracking
https://github.com/python/cpython/pull/157191	patch
https://mail.python.org/archives/list/security-an…	vendor-advisory
https://github.com/python/cpython/commit/b38be2e6…	patch
https://github.com/python/cpython/commit/b8f23e30…	patch
http://www.openwall.com/lists/oss-security/2026/0…

Impacted products

1 product

Vendor	Product	Version
Python Software Foundation	CPython	Affected: 0 , < 3.14.0b1 (python)

Credits

Jing Qian (https://github.com/Civitasmass) Stan Ulbrych (https://github.com/StanFromIreland) Petr Viktorin (https://github.com/encukou)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-82049",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-15T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-16T03:56:12.084Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-09-14T20:07:50.158Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/09/14/27"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "tarfile"
          ],
          "product": "CPython",
          "repo": "https://github.com/python/cpython",
          "vendor": "Python Software Foundation",
          "versions": [
            {
              "lessThan": "3.14.0b1",
              "status": "affected",
              "version": "0",
              "versionType": "python"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Jing Qian (https://github.com/Civitasmass)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Stan Ulbrych (https://github.com/StanFromIreland)"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "Petr Viktorin (https://github.com/encukou)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "type": "text/html",
              "value": "In CPython 3.13 and earlier, the \u003cspan\u003etarfile\u003c/span\u003e\u0026nbsp;module\u0027s \u003cspan\u003edata\u003c/span\u003e\u0026nbsp;and \u003cspan\u003etar\u003c/span\u003e extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose the contents of that file within the extracted tree."
            }
          ],
          "value": "In CPython 3.13 and earlier, the tarfile\u00a0module\u0027s data\u00a0and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose the contents of that file within the extracted tree."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-15T00:34:01.076Z",
        "orgId": "28c92f92-d60d-412d-b760-e73465c3df22",
        "shortName": "PSF"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/5a57248b22ad3b9aafcaaadae2c304a1923daeca"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/python/cpython/issues/157190"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/pull/157191"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/EFJWGAZJA56AKSBR2WHMHQZO7RRLZPRH/"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/b38be2e6cf9d989075ab73412c63e003ebad4ff3"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/b8f23e307097552eaea2604383a12ab280520d0d"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "tarfile extraction filters allow file modification and content disclosure via hard link to symlink",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "28c92f92-d60d-412d-b760-e73465c3df22",
    "assignerShortName": "PSF",
    "cveId": "CVE-2026-82049",
    "datePublished": "2026-09-14T19:14:03.873Z",
    "dateReserved": "2026-08-27T22:23:05.514Z",
    "dateUpdated": "2026-09-16T03:56:12.084Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-8328 (GCVE-0-2026-8328)

Vulnerability from cvelistv5 – Published: 2026-05-13 20:14 – Updated: 2026-08-13 00:26

Title

FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address

Summary

The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host addresses with the actual peer address (getpeername()[0]), ftpcp() still calls parse227() directly and passes the raw attacker-controllable IP address and port to target.sendport(). This patch is related to CVE-2021-4189.

Severity

5.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-14 12:49 UTC

CWE

CWE-918 - Server-Side request forgery (SSRF)

Assigner

PSF mitre root

References

10 references

URL	Tags
https://github.com/python/cpython/issues/87451	issue-tracking
https://github.com/python/cpython/pull/149648	patch
https://mail.python.org/archives/list/security-an…	vendor-advisory
https://github.com/python/cpython/commit/5dadc646…	patch
https://github.com/python/cpython/commit/7d95a1dc…	patch
https://github.com/python/cpython/commit/bb3446dd…	patch
https://github.com/python/cpython/commit/c8870443…	patch
https://github.com/python/cpython/commit/eac4fe3b…	patch
https://github.com/python/cpython/commit/2bbcf3fb…	patch
https://github.com/python/cpython/commit/ef12d0dc…	patch

Impacted products

1 product

Vendor	Product	Version
Python Software Foundation	CPython	Affected: 0 , < 3.10.21 (python) Affected: 3.11.0 , < 3.11.16 (python) Affected: 3.12.0 , < 3.12.14 (python) Affected: 3.13.0 , < 3.13.14 (python) Affected: 3.14.0 , < 3.14.6 (python) Affected: 3.15.0a1 , < 3.15.0b2 (python)

Credits

Qi Deng (https://github.com/ikow) Bénédikt Tran (https://github.com/picnixz) Gregory P. Smith (https://github.com/gpshead)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-8328",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-14T12:49:18.311219Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-14T12:49:39.908Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "ftplib"
          ],
          "product": "CPython",
          "repo": "https://github.com/python/cpython",
          "vendor": "Python Software Foundation",
          "versions": [
            {
              "lessThan": "3.10.21",
              "status": "affected",
              "version": "0",
              "versionType": "python"
            },
            {
              "lessThan": "3.11.16",
              "status": "affected",
              "version": "3.11.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.12.14",
              "status": "affected",
              "version": "3.12.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.13.14",
              "status": "affected",
              "version": "3.13.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.14.6",
              "status": "affected",
              "version": "3.14.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.15.0b2",
              "status": "affected",
              "version": "3.15.0a1",
              "versionType": "python"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Qi Deng (https://github.com/ikow)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "B\u00e9n\u00e9dikt Tran (https://github.com/picnixz)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Gregory P. Smith (https://github.com/gpshead)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "type": "text/html",
              "value": "\u003cdiv\u003eThe ftpcp() function in Lib/ftplib.py was not updated when \nCVE-2021-4189 was fixed. While makepasv() was patched to replace \nserver-supplied PASV host addresses with the actual peer address \n(getpeername()[0]), ftpcp() still calls parse227() directly and passes \nthe raw attacker-controllable IP address and port to target.sendport(). This patch is related to\u0026nbsp;CVE-2021-4189.\u003c/div\u003e"
            }
          ],
          "value": "The ftpcp() function in Lib/ftplib.py was not updated when \nCVE-2021-4189 was fixed. While makepasv() was patched to replace \nserver-supplied PASV host addresses with the actual peer address \n(getpeername()[0]), ftpcp() still calls parse227() directly and passes \nthe raw attacker-controllable IP address and port to target.sendport(). This patch is related to\u00a0CVE-2021-4189."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918 Server-Side request forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T00:26:54.111Z",
        "orgId": "28c92f92-d60d-412d-b760-e73465c3df22",
        "shortName": "PSF"
      },
      "references": [
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/python/cpython/issues/87451"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/pull/149648"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/ITF2BAPBQEPYK3LDMPRSY435JGNHYNDP/"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/5dadc64673ce875ebfb24163907777dae0f6ca06"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/7d95a1dc7382b55cba7fdd6a110336077584a4f0"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/bb3446dda6c49b32e67c11dbbbf221b40be00763"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/c88704431ea3248ca769384c13856330976fac1d"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/eac4fe3b2c77693790a5ef7dfab127c1fee81bf9"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/2bbcf3fb7a420a05605576c0f9468d4675381b5f"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/ef12d0dc824baccf737bba1458e5eed3d1e0fceb"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "28c92f92-d60d-412d-b760-e73465c3df22",
    "assignerShortName": "PSF",
    "cveId": "CVE-2026-8328",
    "datePublished": "2026-05-13T20:14:33.751Z",
    "dateReserved": "2026-05-11T15:06:00.859Z",
    "dateUpdated": "2026-08-13T00:26:54.111Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-9669 (GCVE-0-2026-9669)

Vulnerability from cvelistv5 – Published: 2026-06-08 22:01 – Updated: 2026-08-13 00:26

Title

bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow

Summary

bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.

Severity

8.2 (High)


                        
                          CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-16 12:23 UTC

CWE

CWE-121 - Stack-based buffer overflow

Assigner

PSF mitre root

References

11 references

URL	Tags
https://github.com/python/cpython/pull/150600	patch
https://mail.python.org/archives/list/security-an…	vendor-advisory
https://github.com/python/cpython/issues/150599	issue-tracking
https://github.com/python/cpython/commit/157a5df8…	patch
https://github.com/python/cpython/commit/5755d0f0…	patch
https://github.com/python/cpython/commit/619a12b2…	patch
https://github.com/python/cpython/commit/d3ca2698…	patch
https://github.com/python/cpython/commit/938ec030…	patch
https://github.com/python/cpython/commit/991e6cf8…	patch
https://github.com/python/cpython/commit/1ba6135e…	patch
http://www.openwall.com/lists/oss-security/2026/0…

Impacted products

1 product

Vendor	Product	Version
Python Software Foundation	CPython	Affected: 0 , < 3.10.21 (python) Affected: 3.11.0 , < 3.11.16 (python) Affected: 3.12.0 , < 3.12.14 (python) Affected: 3.13.0 , < 3.13.14 (python) Affected: 3.14.0 , < 3.14.6 (python) Affected: 3.15.0a1 , < 3.15.0b3 (python)

Credits

Bitshift (https://github.com/TheShiftedBit) Emma Smith (https://github.com/emmatyping) Stan Ulbrych (https://github.com/StanFromIreland) Serhiy Storchaka (https://github.com/serhiy-storchaka)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-06-08T23:27:25.188Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/06/08/17"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-9669",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-16T12:23:25.378543Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-16T12:23:44.258Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "bz2"
          ],
          "product": "CPython",
          "repo": "https://github.com/python/cpython",
          "vendor": "Python Software Foundation",
          "versions": [
            {
              "lessThan": "3.10.21",
              "status": "affected",
              "version": "0",
              "versionType": "python"
            },
            {
              "lessThan": "3.11.16",
              "status": "affected",
              "version": "3.11.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.12.14",
              "status": "affected",
              "version": "3.12.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.13.14",
              "status": "affected",
              "version": "3.13.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.14.6",
              "status": "affected",
              "version": "3.14.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.15.0b3",
              "status": "affected",
              "version": "3.15.0a1",
              "versionType": "python"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Bitshift (https://github.com/TheShiftedBit)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Emma Smith (https://github.com/emmatyping)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Stan Ulbrych (https://github.com/StanFromIreland)"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "Serhiy Storchaka (https://github.com/serhiy-storchaka)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "type": "text/html",
              "value": "bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data."
            }
          ],
          "value": "bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121 Stack-based buffer overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T00:26:48.913Z",
        "orgId": "28c92f92-d60d-412d-b760-e73465c3df22",
        "shortName": "PSF"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/pull/150600"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/DBJZETMGUIFK7DVUWMOXHD3Z6IX2QPSX/"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/python/cpython/issues/150599"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/157a5df8cb5d82b33f918a7489e72ce95ceb12b6"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/5755d0f083949ff3c5bf3a37e673e24e306b036e"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/619a12b2e545391dc436b3af79dda22337382a6f"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/d3ca26983dfbccdf609f24ff5877dc3118e4702d"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/938ec030e90c5e53f1faac6fab1643f14e4f4a79"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/991e6cf86496718c4ef00b362d640e00cb5c85b2"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/1ba6135eae75ad8413413caeeedb56ae72320636"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "28c92f92-d60d-412d-b760-e73465c3df22",
    "assignerShortName": "PSF",
    "cveId": "CVE-2026-9669",
    "datePublished": "2026-06-08T22:01:15.420Z",
    "dateReserved": "2026-05-27T03:13:18.152Z",
    "dateUpdated": "2026-08-13T00:26:48.913Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:68132

CVE-2026-3276 (GCVE-0-2026-3276)

CVE-2026-82049 (GCVE-0-2026-82049)

CVE-2026-8328 (GCVE-0-2026-8328)

CVE-2026-9669 (GCVE-0-2026-9669)

Tags

Sightings

Nomenclature

Related by attack behaviour