Description
In Python (CPython) 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacker's copy of api-ms-win-core-path-l1-1-0.dll being loaded and used instead of the system's copy. Windows 8 and later are unaffected.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | python3 | 3.8.2-r0 | — |
| Alpine v3.23 | python3 | 3.8.2-r0 | — |
| Alpine v3.22 | python3 | 3.8.2-r0 | — |
| Alpine v3.21 | python3 | 3.8.2-r0 | — |
| Alpine v3.20 | python3 | 3.8.2-r0 | — |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | python3 | 3.8.2-r0 | — |
| Alpine v3.18 | python3 | 3.8.2-r0 | — |
| Alpine v3.17 | python3 | 3.8.2-r0 | — |
| Alpine v3.16 | python3 | 3.8.2-r0 | — |
| Alpine v3.15 | python3 | 3.8.2-r0 | — |
| Alpine v3.14 | python3 | 3.8.2-r0 | — |
| Alpine v3.13 | python3 | 3.8.2-r0 | — |
| Alpine v3.12 | python3 | 3.8.2-r0 | — |
| Alpine v3.11 | python3 | 3.8.2-r0 | — |
| Alpine v3.10 | python3 | 3.7.7-r0 | — |
Advisories 2
- SSA-398330 SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5 Siemens ProductCERT · Oct 13, 2026
- ICSA-23-348-10 Siemens SIMATIC S7-1500 CISA ICS & IT advisories · Aug 12, 2025