Description
There is a LOW severity vulnerability affecting CPython, specifically the
'http.cookies' standard library module.
When parsing cookies that contained backslashes for quoted characters in
the cookie value, the parser would use an algorithm with quadratic
complexity, resulting in excess CPU resources being used while parsing the
value.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Python Software Foundation | CPython | < 3.8.20, 3.9.0 – < 3.9.20, 3.10.0 – < 3.10.15, 3.11.0 – < 3.11.10, 3.12.0 – < 3.12.6, 3.13.0a1 – < 3.13.0rc2 | 3.8.20 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | pypy3 | 7.3.18+dfsg-1 | — |
| Debian 13 | pypy3 | 7.3.18+dfsg-1 | — |
| Debian 13 | python3.13 | 3.13.0~rc2-1 | — |
| Debian 12 | pypy3 | No fix yet | — |
| Debian 12 | python3.11 | 3.11.2-6+deb12u5 | — |
| Debian 11 | pypy3 | 7.3.5+dfsg-2+deb11u5 | DLA-4354-1 |
| Debian 11 | python3.9 | 3.9.2-1+deb11u2 | DLA-3980-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | python3.12 | 3.12.3-1ubuntu0.2 | USN-7015-1 |
| Ubuntu 22.04 LTS | python3.10 | 3.10.12-1~22.04.6 | USN-7015-1 |
| Ubuntu 20.04 LTS | python3.8 | 3.8.10-0ubuntu1~20.04.12 | USN-7015-1 |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 22.04 LTS | python2.7 | 2.7.18-13ubuntu1.2+esm2 | USN-7015-2 |
| Ubuntu Pro 22.04 LTS | python3.11 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | python2.7 | 2.7.18-1~20.04.4+esm2 | USN-7015-2 |
| Ubuntu Pro 20.04 LTS | python3.9 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | python2.7 | 2.7.17-1~18.04ubuntu1.13+esm5 | USN-7015-2 |
| Ubuntu Pro 18.04 LTS | python3.6 +2 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | python2.7 | 2.7.12-1ubuntu0~16.04.18+esm10 | USN-7015-2 |
| Ubuntu Pro 16.04 LTS | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm14 | USN-7015-2 |
| Ubuntu Pro 14.04 LTS | python2.7 | 2.7.6-8ubuntu0.6+esm20 | — |
| Ubuntu Pro 14.04 LTS | python3.4 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | python3.5 | 3.5.2-2ubuntu0~16.04.4~14.04.1+esm3 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | python3 +8 | 3.9.21-1.el9_5 | RHSA-2024:10983 |
| RHEL 9 | python3.11 +6 | 3.11.9-7.el9_5.3 | RHSA-2025:3634 |
| RHEL 9 | python3.12 +6 | 3.12.5-2.el9_5.3 | RHSA-2025:3631 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | python3.11 +6 | 3.11.9-7.el9_5.3 | ALSA-2025:3634 |
| AlmaLinux 9 | python3.12 +6 | 3.12.5-2.el9_5.3 | ALSA-2025:3631 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | python3.11 | 3.11.9-7.el9_5.3 | RLSA-2025:3634 |
| Rocky Linux 9 | python3.12 | 3.12.5-2.el9_5.3 | RLSA-2025:3631 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | python +1 | 2.7.18-150000.105.1 | SUSE-SU-2026:0774-1 |
| SLES 15 SP6 | python3 +1 | 3.6.15-150300.10.72.1 | SUSE-SU-2024:3470-1 |
| SLES 15 SP6 | python311-core | 3.11.10-150600.3.6.1 | SUSE-SU-2024:3427-1 |
| SLES 15 SP5 | python3 +1 | 3.6.15-150300.10.72.1 | SUSE-SU-2024:3470-1 |
| SLES 15 SP5 | python39 +1 | 3.9.20-150300.4.52.1 | SUSE-SU-2024:3411-1 |
| SLES 15 SP4 | python3 +1 | 3.6.15-150300.10.72.1 | SUSE-SU-2024:3470-1 |
| SLES 15 SP4 | python310 +1 | 3.10.15-150400.4.57.1 | SUSE-SU-2024:3357-1 |
| SLES 15 SP4 | python311 +2 | 3.11.10-150400.9.35.1 | SUSE-SU-2024:3418-1 |
| SLES 15 SP3 | python3 +1 | 3.6.15-150300.10.72.1 | SUSE-SU-2024:3470-1 |
| SLES 15 SP3 | python39 +1 | 3.9.20-150300.4.52.1 | SUSE-SU-2024:3411-1 |
Show 28 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP2 | python3 +1 | 3.6.15-150000.3.155.2 | SUSE-SU-2024:3302-1 |
| SLES 12 SP5 | python +2 | 2.7.18-33.66.1 | SUSE-SU-2026:0802-1 |
| SLES 12 SP5 | python3 +1 | 3.4.10-25.139.1 | SUSE-SU-2024:3384-1 |
| SLES 12 SP5 | python36 +1 | 3.6.15-61.1 | SUSE-SU-2024:3293-1 |
| SLES 12 | python3 +1 | 3.4.10-25.139.1 | SUSE-SU-2024:3384-1 |
| SLES 3 | python311 +2 | 3.11.10-150400.9.35.1 | SUSE-SU-2024:3427-1, SUSE-SU-2024:3418-1 |
| SLES 3 | python312 +1 | 3.12.6-150600.3.6.1 | SUSE-SU-2024:3303-1 |
| SLES for SAP 15 SP4 | python3 +1 | 3.6.15-150300.10.72.1 | SUSE-SU-2024:3470-1 |
| SLES for SAP 15 SP4 | python310 +1 | 3.10.15-150400.4.57.1 | SUSE-SU-2024:3357-1 |
| SLES for SAP 15 SP4 | python311 +2 | 3.11.10-150400.9.35.1 | SUSE-SU-2024:3418-1 |
| SLES for SAP 15 SP3 | python3 +1 | 3.6.15-150300.10.72.1 | SUSE-SU-2024:3470-1 |
| SLES for SAP 15 SP3 | python39 +1 | 3.9.20-150300.4.52.1 | SUSE-SU-2024:3411-1 |
| SLES for SAP 15 SP2 | python3 +1 | 3.6.15-150000.3.155.2 | SUSE-SU-2024:3302-1 |
| SLES for SAP 12 SP5 | python3 +1 | 3.4.10-25.139.1 | SUSE-SU-2024:3384-1 |
| SLES for SAP 12 SP5 | python36 +1 | 3.6.15-61.1 | SUSE-SU-2024:3293-1 |
| SLE Micro 6.1 | python311 +1 | 3.11.12-slfo.1.1_1.1 | SUSE-SU-2025:20374-1 |
| SLE Micro 6.0 | python311 +1 | 3.11.8-4.1 | SUSE-SU-2025:20154-1, SUSE-SU-2025:20065-1 |
| SLE Micro 5.5 | python3 +1 | 3.6.15-150300.10.72.1 | SUSE-SU-2024:3470-1 |
| SLE Micro 5.4 | python3 +1 | 3.6.15-150300.10.72.1 | SUSE-SU-2024:3470-1 |
| SLE Micro 5.3 | python3 +1 | 3.6.15-150300.10.72.1 | SUSE-SU-2024:3470-1 |
| SLE Micro 5.2 | python3 +1 | 3.6.15-150300.10.72.1 | SUSE-SU-2024:3470-1 |
| SLE Micro 5.1 | python3 +1 | 3.6.15-150000.3.155.2 | SUSE-SU-2024:3302-1 |
| SLE HPC 15 SP4 | python3 +1 | 3.6.15-150300.10.72.1 | SUSE-SU-2024:3470-1 |
| SLE HPC 15 SP4 | python310 +1 | 3.10.15-150400.4.57.1 | SUSE-SU-2024:3357-1 |
| SLE HPC 15 SP4 | python311 +2 | 3.11.10-150400.9.35.1 | SUSE-SU-2024:3418-1 |
| SLE HPC 15 SP3 | python3 +1 | 3.6.15-150300.10.72.1 | SUSE-SU-2024:3470-1 |
| SLE HPC 15 SP3 | python39 +1 | 3.9.20-150300.4.52.1 | SUSE-SU-2024:3411-1 |
| SLE HPC 15 SP2 | python3 +1 | 3.6.15-150000.3.155.2 | SUSE-SU-2024:3302-1 |
| SUSE Manager Server Module 4.3 | venv-salt-minion | 3006.0-150000.3.67.1 | SUSE-SU-2024:4021-1 |
| SUSE Manager Server 4.3 | python3 +1 | 3.6.15-150300.10.72.1 | SUSE-SU-2024:3470-1 |
| SUSE Manager Proxy Module 4.3 | venv-salt-minion | 3006.0-150000.3.67.1 | SUSE-SU-2024:4021-1 |
| SUSE Manager Proxy 4.3 | python3 +1 | 3.6.15-150300.10.72.1 | SUSE-SU-2024:3470-1 |
| SUSE Manager Client Tools for SLE Micro 5 | venv-salt-minion | 3006.0-150000.3.67.1 | SUSE-SU-2024:4021-1 |
| SUSE Manager Client Tools for RHEL, Liberty and Clones 9 | venv-salt-minion | 3006.0-1.47.1 | SUSE-SU-2024:4029-1, SUSE-EL-9-CLIENT-TOOLS-2024-4029 |
| SUSE Manager Client Tools 15 | venv-salt-minion | 3006.0-150000.3.67.1 | SUSE-SU-2024:4021-1 |
| SUSE Manager Client Tools 12 | venv-salt-minion | 3006.0-3.65.1 | SUSE-SU-2024:4020-1 |
| SUSE Enterprise Storage 7.1 | python3 +1 | 3.6.15-150300.10.72.1 | SUSE-SU-2024:3470-1 |
| SUSE Enterprise Storage 7.1 | python39 +1 | 3.9.20-150300.4.52.1 | SUSE-SU-2024:3411-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy +1 | 3.11.9-1.26.1 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-cryptography | 3.3.2-1.18.1 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-docker | 7.0.0-1.8.1 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-idna | 3.4-1.9.2 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-passlib +1 | 1.7.4-1.3.1 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-setuptools | 67.7.2-1.12.1 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-urllib3 | 2.0.7-1.12.1 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-zipp | 3.15.0-1.9.2 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | venv-salt-minion | 3006.0-1.47.1 | SUSE-SU-2024:4029-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | python310 | 3.10.15-1.1 | openSUSE-SU-2024:14345-1 |
| openSUSE Tumbleweed | python311 | 3.11.9-7.1 | openSUSE-SU-2024:14346-1 |
| openSUSE Tumbleweed | python312 | 3.12.6-1.1 | openSUSE-SU-2024:14370-1 |
| openSUSE Tumbleweed | python313 | 3.13.0~rc2-1.1 | openSUSE-SU-2024:14326-1 |
| openSUSE Tumbleweed | python314 | 3.14.0~a1-1.1 | openSUSE-SU-2024:14434-1 |
| openSUSE Tumbleweed | python315 | 3.15.0~a1-1.1 | openSUSE-SU-2025:15713-1 |
| openSUSE Tumbleweed | python39 | 3.9.20-2.1 | openSUSE-SU-2024:14352-1 |
| openSUSE Leap 15.6 | python +2 | 2.7.18-150000.105.1 | SUSE-SU-2026:0774-1 |
| openSUSE Leap 15.6 | python3 +2 | 3.6.15-150300.10.72.1 | SUSE-SU-2024:3470-1 |
| openSUSE Leap 15.6 | python310 +2 | 3.10.15-150400.4.57.1 | SUSE-SU-2024:3357-1 |
| openSUSE Leap 15.6 | python311 +2 | 3.11.10-150600.3.6.1 | SUSE-SU-2024:3427-1 |
| openSUSE Leap 15.6 | python312 +2 | 3.12.6-150600.3.6.1 | SUSE-SU-2024:3303-1 |
| openSUSE Leap 15.6 | python39 +2 | 3.9.20-150300.4.52.1 | SUSE-SU-2024:3411-1 |
| openSUSE Leap 15.5 | python3 +2 | 3.6.15-150300.10.72.1 | SUSE-SU-2024:3470-1 |
| openSUSE Leap 15.5 | python310 +2 | 3.10.15-150400.4.57.1 | SUSE-SU-2024:3357-1 |
| openSUSE Leap 15.5 | python311 +2 | 3.11.10-150400.9.35.1 | SUSE-SU-2024:3418-1 |
| openSUSE Leap 15.5 | python39 +2 | 3.9.20-150300.4.52.1 | SUSE-SU-2024:3411-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.5 | python3 +1 | 3.6.15-150300.10.72.1 | SUSE-SU-2024:3470-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | python3 | 3.12.6-r0 | — |
| Alpine v3.23 | python3 | 3.12.6-r0 | — |
| Alpine v3.22 | python3 | 3.12.6-r0 | — |
| Alpine v3.21 | python3 | 3.12.6-r0 | — |
| Alpine v3.20 | py3-tornado | 6.4.2-r0 | — |
| Alpine v3.20 | python3 | 3.12.6-r0 | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | python3 | 3.11.10-r0 | — |
| Alpine v3.18 | python3 | 3.11.10-r0 | — |
| Alpine v3.17 | python3 | 3.10.15-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | python3 +7 | 3.9.20-1.amzn2023.0.2 | ALAS2023-2024-790 |
| Amazon Linux 2023 | python3.11 +6 | 3.11.6-1.amzn2023.0.6 | ALAS2023-2025-829 |
| Amazon Linux 2 | python +6 | 2.7.18-1.amzn2.0.11 | ALAS2-2025-2797 |
| Amazon Linux 2 | python3 +6 | 3.7.16-1.amzn2.0.12 | ALAS2-2025-2754 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | python-py | No fix yet | — |
| Azure Linux 3 | python3 | 3.12.3-2 | — |
| Azure Linux 3 | tensorflow | 2.16.1-6 | — |
| Azure Linux 2 (CBL-Mariner) | python3 | 3.9.19-4 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | python3.11 +6 | 3.11.9-7.el9_5.3 | ELSA-2025-3634 |
| Oracle Linux 9 | python3.12 +6 | 3.12.5-2.el9_5.3 | ELSA-2025-3631 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | nodejs-18 | 18.20.8-r4 | — |
| Wolfi rolling | nodejs-20 | 20.19.5-r0 | — |
| Wolfi rolling | nodejs-22 | 22.21.1-r0 | — |
| Wolfi rolling | python-3.10 | 3.10.15-r0 | — |
| Wolfi rolling | python-3.11 | 3.11.9-r9 | — |
| Wolfi rolling | python-3.12 | 3.12.5-r2 | — |
Advisories 50
- WID-SEC-2025-0135 Oracle Communications Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 3, 2026
- ALSA-2025:3631 Low: python3.12 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:3634 Low: python3.11 security update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2025-0166 Oracle PeopleSoft: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 11, 2026
- RHSA-2024:10983 Red Hat Security Advisory: python3.9:3.9.21 security update Red Hat Security Advisories (RHSA) · Aug 19, 2026
- RHSA-2025:3631 Red Hat Security Advisory: python3.12 security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:3634 Red Hat Security Advisory: python3.11 security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- SUSE-EL-9-CLIENT-TOOLS-2024-4029 Security update for SUSE Manager Salt Bundle SUSE / openSUSE Security Updates · Jul 24, 2026
- USN-7015-2 python2.7, python3.5 vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- USN-7015-1 python3.10, python3.12, python3.8 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- openSUSE-SU-2025:15713-1 python315-3.15.0~a1-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20065-1 Security update for python311 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20154-1 Security update for python311 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20374-1 Security update for python311 SUSE / openSUSE Security Updates · Mar 23, 2026
- DLA-3980-1 python3.9 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2026:0802-1 Security update for python SUSE / openSUSE Security Updates · Mar 5, 2026
- WID-SEC-2024-1889 Python: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Mar 4, 2026
- SUSE-SU-2026:0774-1 Security update for python SUSE / openSUSE Security Updates · Mar 4, 2026
- SUSE-SU-2024:3357-1 Security update for python310 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14434-1 python314-3.14.0~a1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14370-1 python312-3.12.6-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3303-1 Security update for python312 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3470-1 Security update for python3 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14326-1 python313-3.13.0~rc2-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3418-1 Security update for python311 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3384-1 Security update for python3 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4020-1 Security update for SUSE Manager Salt Bundle SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4029-1 Security update for SUSE Manager Salt Bundle SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3427-1 Security update for python311 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14352-1 python39-3.9.20-2.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3293-1 Security update for python36 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3411-1 Security update for python39 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4021-1 Security update for SUSE Manager Salt Bundle SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14345-1 python310-3.10.15-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- NCSC-2025-0382 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Dec 9, 2025
- SSA-202008 SSA-202008: Multiple Vulnerabilities in Ruggedcom Rox Before V2.17.0 Siemens ProductCERT · Dec 9, 2025
- DLA-4354-1 pypy3 - security update Debian Security (DSA / DLA) · Oct 31, 2025
- WID-SEC-2025-0225 Dell PowerProtect Data Domain: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 1, 2025
- RLSA-2025:3631 Low: python3.12 security update Rocky Linux Security Advisories · Jul 29, 2025
- RLSA-2025:3634 Low: python3.11 security update Rocky Linux Security Advisories · Jul 29, 2025
- openSUSE-SU-2024:14346-1 python311-3.11.9-7.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- SUSE-SU-2024:3302-1 Security update for python3 SUSE / openSUSE Security Updates · May 2, 2025
- ELSA-2025-3634 Low: python3.11 security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Apr 7, 2025
- ELSA-2025-3631 Low: python3.12 security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Apr 7, 2025
- ALAS2-2025-2797 Moderate: python security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Mar 25, 2025
- ALAS2023-2025-829 Moderate: python3.11 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Mar 13, 2025
- ALAS2023-2024-790 Important: python3.9 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Feb 26, 2025
- ALAS2-2025-2754 Moderate: python3 security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Feb 25, 2025
- NCSC-2025-0023 Kwetsbaarheden verholpen in Oracle PeopleSoft NCSC-NL (Netherlands) · Jan 22, 2025
- NCSC-2025-0021 Kwetsbaarheden verholpen in Oracle Communications NCSC-NL (Netherlands) · Jan 22, 2025
References
- https://github.com/python/cpython/pull/123075 patch
- https://github.com/python/cpython/issues/123067 issue-tracking
- https://mail.python.org/archives/list/security-announce@python.org/thread/HXJAAAALNUNGCQUS2W7WR6GFIZIHFOOK/ vendor-advisory
- https://github.com/python/cpython/commit/391e5626e3ee5af267b97e37abc7475732e67621 patch
- https://github.com/python/cpython/commit/dcc3eaef98cd94d6cb6cb0f44bd1c903d04f33b1 patch
- https://github.com/python/cpython/commit/a77ab24427a18bff817025adb03ca920dc3f1a06 patch
- https://github.com/python/cpython/commit/b2f11ca7667e4d57c71c1c88b255115f16042d9a patch
- https://github.com/python/cpython/commit/d4ac921a4b081f7f996a5d2b101684b67ba0ed7f patch
- https://github.com/python/cpython/commit/d662e2db2605515a767f88ad48096b8ac623c774 patch
- https://github.com/python/cpython/commit/44e458357fca05ca0ae2658d62c8c595b048b5ef patch